Skip to content
OpenAdvisories
High · 8.4 CVE-2024-27169 EUVD-2024-24410GHSA-qfh9-xg32-rp5p

Lack of authentication

Published Jun 14, 2024 · Updated Feb 13, 2025 · Assigned by Toshiba

Description

Toshiba printers provides API without authentication for internal access. A local attacker can bypass authentication in applications, providing administrative access. As for the affected products/models/versions, see the reference URL.

Affected products

VendorProductAffectedFixed
Toshiba Tec Toshiba Tec e-Studio multi-function peripheral (MFP) see the reference URL —

References