Skip to content
OpenAdvisories
High · 7.1 CVE-2024-27168 EUVD-2024-24409GHSA-pc9h-2fg4-m4v8

Hardcoded keys used to generate authentication cookies

Published Jun 14, 2024 · Updated Feb 13, 2025 · Assigned by Toshiba

Description

It appears that some hardcoded keys are used for authentication to internal API. Knowing these private keys may allow attackers to bypass authentication and reach administrative interfaces. As for the affected products/models/versions, see the reference URL.

Affected products

VendorProductAffectedFixed
Toshiba Tec Toshiba Tec e-Studio multi-function peripheral (MFP) see the reference URL —

References