by Kastro
Paper/Archive/CVE-2024-27172

CVE-2024-27172

Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) — Remote Code Execution

EPSS 27%public exploitCVSS 9.8
critical.is priorityof 100
59
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 98.0.980 × 2019.6Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Remote Command program allows an attacker to get Remote Code Execution. As for the affected products/models/versions, see the reference URL.

Affected

ProductAffectedFixed inSource
Toshiba Tec e-Studio multi-function peripheral (MFP)see the reference URL–CNA
e-studio-2521_ac≤ *–CISA-ADP
e-studio-2020_ac≤ *–CISA-ADP
e-studio-2520_nc≤ *–CISA-ADP
e-studio-2021_ac≤ *–CISA-ADP
e-studio-2525_ac≤ *–CISA-ADP
e-studio-3025_ac≤ *–CISA-ADP
e-studio-3525_ac≤ *–CISA-ADP
e-studio-3525_acg≤ *–CISA-ADP
e-studio-4525_ac≤ *–CISA-ADP
e-studio-5525_ac≤ *–CISA-ADP
e-studio-5525_acg≤ *–CISA-ADP

Scores by source

Toshiba (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

reftoshibatec.com/information/20240531_01.htmlreftoshibatec.com/information/pdf/information20240531_01.pdfrefjvn.jp/en/vu/JVNVU97136265/index.htmlrefseclists.org/fulldisclosure/2024/Jul/1