Skip to content
OpenAdvisories
High · 7.8 CVE-2024-3498 EUVD-2024-32084GHSA-m5hm-48p4-4q77

Incorrect Permission Assignment Privilege Escalation Vulnerability

Published Jun 14, 2024 · Updated Aug 1, 2024 · Assigned by Toshiba

Description

Attackers can then execute malicious files by enabling certain services of the printer via the web configuration page and elevate its privileges to root. As for the affected products/models/versions, see the reference URL.

Affected products

VendorProductAffectedFixed
Toshiba Tec Toshiba Tec e-Studio multi-function peripheral (MFP) see the reference URL —

References