Skip to content
OpenAdvisories
High · 7.4 CVE-2024-27171 EUVD-2024-24412GHSA-v37p-fmrv-x297

Insecure permissions

Published Jun 14, 2024 · Updated Feb 13, 2025 · Assigned by Toshiba

Description

A remote attacker using the insecure upload functionality will be able to overwrite any Python file and get Remote Code Execution. As for the affected products/models/versions, see the reference URL.

Affected products

VendorProductAffectedFixed
Toshiba Tec Toshiba Tec e-Studio multi-function peripheral (MFP) see the reference URL —

References