CVE-2024-27150 – Local Privilege Escalation and Remote Code Execution using insecure LD_LIBRARY_PATH
https://notcve.org/view.php?id=CVE-2024-27150
14 Jun 2024 — The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. ... Las impresoras Toshiba son afectadas por una vulnerabilidad de escalada de privilegios local. ... En cuanto a los productos/modelos/versiones afectados, consulte la URL de referencia. 103 models of Toshiba Multi-Function Printers (MFP) are vulnerable to 40 different vulnerabilities including remote code execution, local privilege escalation, xml injection, and more. • https://packetstorm.news/files/id/179367 • CWE-276: Incorrect Default Permissions •
CVE-2024-27149 – Local Privilege Escalation and Remote Code Execution using insecure LD_PRELOAD
https://notcve.org/view.php?id=CVE-2024-27149
14 Jun 2024 — The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. ... Las impresoras Toshiba son afectadas por una vulnerabilidad de escalada de privilegios local. ... En cuanto a los productos/modelos/versiones afectados, consulte la URL de referencia. 103 models of Toshiba Multi-Function Printers (MFP) are vulnerable to 40 different vulnerabilities including remote code execution, local privilege escalation, xml injection, and more. • https://packetstorm.news/files/id/179367 • CWE-276: Incorrect Default Permissions •
CVE-2024-27148 – Local Privilege Escalation and Remote Code Execution using insecure PATH
https://notcve.org/view.php?id=CVE-2024-27148
14 Jun 2024 — The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. ... Las impresoras Toshiba son afectadas por una vulnerabilidad de escalada de privilegios local. ... En cuanto a los productos/modelos/versiones afectados, consulte la URL de referencia. 103 models of Toshiba Multi-Function Printers (MFP) are vulnerable to 40 different vulnerabilities including remote code execution, local privilege escalation, xml injection, and more. • https://packetstorm.news/files/id/179367 • CWE-276: Incorrect Default Permissions •
CVE-2024-27147 – Local Privilege Escalation and Remote Code Execution using snmpd
https://notcve.org/view.php?id=CVE-2024-27147
14 Jun 2024 — The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. ... Las impresoras Toshiba son afectadas por una vulnerabilidad de escalada de privilegios local. ... En cuanto a los productos/modelos/versiones afectados, consulte la URL de referencia. 103 models of Toshiba Multi-Function Printers (MFP) are vulnerable to 40 different vulnerabilities including remote code execution, local privilege escalation, xml injection, and more. • https://packetstorm.news/files/id/179367 • CWE-250: Execution with Unnecessary Privileges •
CVE-2024-27146 – Lack of privileges separation
https://notcve.org/view.php?id=CVE-2024-27146
14 Jun 2024 — En cuanto a los productos/modelos/versiones afectados, consulte la URL de referencia. 103 models of Toshiba Multi-Function Printers (MFP) are vulnerable to 40 different vulnerabilities including remote code execution, local privilege escalation, xml injection, and more. • https://packetstorm.news/files/id/179367 • CWE-250: Execution with Unnecessary Privileges •
CVE-2024-27145 – Multiple Post-authenticated Remote Code Execution
https://notcve.org/view.php?id=CVE-2024-27145
14 Jun 2024 — For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL. 103 models of Toshiba Multi-Function Printers (MFP) are vulnerable to 40 different vulnerabilities including remote code execution, local privilege escalation, xml injection, and more. • https://packetstorm.news/files/id/179367 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVE-2024-27144 – Pre-authenticated Remote Code Execution
https://notcve.org/view.php?id=CVE-2024-27144
14 Jun 2024 — And the Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. And the Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. ... The programs can be replaced by malicious programs by any local or remote attacker. The programs can be replaced by malicious programs by any local or remote attacker. ... • https://packetstorm.news/files/id/179367 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-276: Incorrect Default Permissions •
CVE-2024-27143 – Pre-authenticated Remote Code Execution
https://notcve.org/view.php?id=CVE-2024-27143
14 Jun 2024 — For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL. 103 models of Toshiba Multi-Function Printers (MFP) are vulnerable to 40 different vulnerabilities including remote code execution, local privilege escalation, xml injection, and more. • https://packetstorm.news/files/id/179367 • CWE-250: Execution with Unnecessary Privileges •
CVE-2024-27142 – Pre-authenticated XXE injection
https://notcve.org/view.php?id=CVE-2024-27142
14 Jun 2024 — En cuanto a los productos/modelos/versiones afectados, consulte la URL de referencia. 103 models of Toshiba Multi-Function Printers (MFP) are vulnerable to 40 different vulnerabilities including remote code execution, local privilege escalation, xml injection, and more. • https://packetstorm.news/files/id/179367 • CWE-776: Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') •
CVE-2024-27141 – Pre-authenticated Time-Based Blind XXE injection
https://notcve.org/view.php?id=CVE-2024-27141
14 Jun 2024 — As for the affected products/models/versions, see the reference URL. 103 models of Toshiba Multi-Function Printers (MFP) are vulnerable to 40 different vulnerabilities including remote code execution, local privilege escalation, xml injection, and more. • https://packetstorm.news/files/id/179367 • CWE-776: Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') •