Product by Toshiba Tec Corporation
Toshiba Tec E-studio Multi-function Peripheral (mfp)
43 known vulnerabilities in Toshiba Tec E-studio Multi-function Peripheral (mfp) (Toshiba Tec Corporation), 0 of them actively exploited (CISA KEV).
Key figures
43
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-27172 | Remote Code Execution | 9.8 | |
| Critical | CVE-2024-27173 | insecure upload | 9.8 | |
| Medium | CVE-2024-27162 | DOM-based XSS | 6.1 | |
| Critical | CVE-2024-27174 | insecure upload | 9.8 | |
| Critical | CVE-2024-27144 | Pre-authenticated Remote Code Execution | 9.8 | |
| Critical | CVE-2024-27143 | Pre-authenticated Remote Code Execution | 9.8 | |
| Critical | CVE-2024-27145 | Multiple Post-authenticated Remote Code Execution | 9.8 | |
| High | CVE-2024-27178 | Remote Code Execution | 7.2 | |
| High | CVE-2024-27177 | Remote Code Execution | 7.2 | |
| High | CVE-2024-27176 | Remote Code Execution | 7.2 | |
| High | CVE-2024-3497 | Directory Traversal Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-3496 | Authentication Bypass Vulnerability | 8.8 | |
| Medium | CVE-2024-27141 | Pre-authenticated Time-Based Blind XXE injection | 5.9 | |
| Medium | CVE-2024-27142 | Pre-authenticated XXE injection | 5.9 | |
| High | CVE-2024-27171 | Insecure permissions | 7.4 | |
| Medium | CVE-2024-27175 | Local File Inclusion | 4.4 | |
| High | CVE-2024-27155 | Local Privilege Escalation and Remote Code Execution using insecure permissions | 7.7 | |
| High | CVE-2024-27151 | Local Privilege Escalation and Remote Code Execution using insecure permissions | 7.4 | |
| High | CVE-2024-27169 | Lack of authentication | 8.4 | |
| Medium | CVE-2024-27157 | Leak of authentication sessions in secure logs | 6.8 | |
| Medium | CVE-2024-27156 | Leak of authentication sessions in secure logs | 6.8 | |
| High | CVE-2024-3498 | Incorrect Permission Assignment Privilege Escalation Vulnerability | 7.8 | |
| Medium | CVE-2024-27163 | Leak of admin password and passwords | 6.5 | |
| High | CVE-2024-27165 | Local Privilege Escalation | 7.8 | |
| High | CVE-2024-27158 | Hardcoded root password | 7.4 |