# Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP).

Every CVE that names Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Incorrect Permission Assignment Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2024-3498.md)
  `CVE-2024-3498` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 7.8 High · Not analysed yet · Published 14 Jun 2024 · Tags: Privilege escalation
- [Directory Traversal Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-3497.md)
  `CVE-2024-3497` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 8.8 High · Not analysed yet · Published 14 Jun 2024 · Tags: Path traversal
- [Authentication Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-3496.md)
  `CVE-2024-3496` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 8.8 High · Not analysed yet · Published 14 Jun 2024 · Tags: Authentication bypass
- [TOCTOU vulnerability](https://agentprime.io/advisories/CVE-2024-27180.md)
  `CVE-2024-27180` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 6.7 Medium · Not analysed yet · Published 14 Jun 2024 · Tags: Broken access control
- [Session disclosure inside the log files](https://agentprime.io/advisories/CVE-2024-27179.md)
  `CVE-2024-27179` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 4.7 Medium · Not analysed yet · Published 14 Jun 2024 · Tags: CWE-1295
- [Remote Code Execution](https://agentprime.io/advisories/CVE-2024-27178.md)
  `CVE-2024-27178` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 7.2 High · Not analysed yet · Published 14 Jun 2024 · Tags: Path traversal
- [Remote Code Execution](https://agentprime.io/advisories/CVE-2024-27177.md)
  `CVE-2024-27177` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 7.2 High · Not analysed yet · Published 14 Jun 2024 · Tags: Path traversal
- [Remote Code Execution](https://agentprime.io/advisories/CVE-2024-27176.md)
  `CVE-2024-27176` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 7.2 High · Not analysed yet · Published 14 Jun 2024 · Tags: Path traversal
- [Local File Inclusion](https://agentprime.io/advisories/CVE-2024-27175.md)
  `CVE-2024-27175` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 4.4 Medium · Not analysed yet · Published 14 Jun 2024 · Tags: Path traversal
- [insecure upload](https://agentprime.io/advisories/CVE-2024-27174.md)
  `CVE-2024-27174` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jun 2024 · Tags: Path traversal
- [insecure upload](https://agentprime.io/advisories/CVE-2024-27173.md)
  `CVE-2024-27173` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jun 2024 · Tags: Path traversal
- [Remote Code Execution](https://agentprime.io/advisories/CVE-2024-27172.md)
  `CVE-2024-27172` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.27 · Not analysed yet · Published 14 Jun 2024 · Tags: Command injection
- [Insecure permissions](https://agentprime.io/advisories/CVE-2024-27171.md)
  `CVE-2024-27171` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 7.4 High · Not analysed yet · Published 14 Jun 2024 · Tags: Broken access control
- [Hardcoded credentials for WebDAV access](https://agentprime.io/advisories/CVE-2024-27170.md)
  `CVE-2024-27170` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 7.4 High · Not analysed yet · Published 14 Jun 2024 · Tags: Hard-coded credentials
- [Lack of authentication](https://agentprime.io/advisories/CVE-2024-27169.md)
  `CVE-2024-27169` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 8.4 High · Not analysed yet · Published 14 Jun 2024 · Tags: Authentication bypass
- [Hardcoded keys used to generate authentication cookies](https://agentprime.io/advisories/CVE-2024-27168.md)
  `CVE-2024-27168` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 7.1 High · Not analysed yet · Published 14 Jun 2024 · Tags: Hard-coded credentials
- [Insecure permissions](https://agentprime.io/advisories/CVE-2024-27167.md)
  `CVE-2024-27167` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 7.4 High · Not analysed yet · Published 14 Jun 2024 · Tags: Broken access control
- [Insecure permissions](https://agentprime.io/advisories/CVE-2024-27166.md)
  `CVE-2024-27166` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 7.4 High · Not analysed yet · Published 14 Jun 2024 · Tags: Broken access control, Weak cryptography or TLS, CWE-256
- [Local Privilege Escalation](https://agentprime.io/advisories/CVE-2024-27165.md)
  `CVE-2024-27165` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 7.8 High · Not analysed yet · Published 14 Jun 2024 · Tags: CWE-272
- [Hardcoded credentials](https://agentprime.io/advisories/CVE-2024-27164.md)
  `CVE-2024-27164` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 7.1 High · Not analysed yet · Published 14 Jun 2024 · Tags: Hard-coded credentials
- [Leak of admin password and passwords](https://agentprime.io/advisories/CVE-2024-27163.md)
  `CVE-2024-27163` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 6.5 Medium · Not analysed yet · Published 14 Jun 2024 · Tags: Weak cryptography or TLS
- [DOM-based XSS](https://agentprime.io/advisories/CVE-2024-27162.md)
  `CVE-2024-27162` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 6.1 Medium · EPSS 0.21 · Not analysed yet · Published 14 Jun 2024 · Tags: Cross-site scripting (XSS)
- [Hardcoded password used to encrypt files](https://agentprime.io/advisories/CVE-2024-27161.md)
  `CVE-2024-27161` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 6.2 Medium · Not analysed yet · Published 14 Jun 2024 · Tags: Hard-coded credentials
- [Hardcoded password used to encrypt logs and use of weak cipher](https://agentprime.io/advisories/CVE-2024-27160.md)
  `CVE-2024-27160` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 6.2 Medium · Not analysed yet · Published 14 Jun 2024 · Tags: Hard-coded credentials
- [Hardcoded password used to encrypt logs](https://agentprime.io/advisories/CVE-2024-27159.md)
  `CVE-2024-27159` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 6.2 Medium · Not analysed yet · Published 14 Jun 2024 · Tags: Hard-coded credentials
- [Hardcoded root password](https://agentprime.io/advisories/CVE-2024-27158.md)
  `CVE-2024-27158` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 7.4 High · Not analysed yet · Published 14 Jun 2024 · Tags: CWE-1392
- [Leak of authentication sessions in secure logs](https://agentprime.io/advisories/CVE-2024-27157.md)
  `CVE-2024-27157` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 6.8 Medium · Not analysed yet · Published 14 Jun 2024 · Tags: Information disclosure
- [Leak of authentication sessions in secure logs](https://agentprime.io/advisories/CVE-2024-27156.md)
  `CVE-2024-27156` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 6.8 Medium · Not analysed yet · Published 14 Jun 2024 · Tags: Information disclosure
- [Local Privilege Escalation and Remote Code Execution using insecure permissions](https://agentprime.io/advisories/CVE-2024-27155.md)
  `CVE-2024-27155` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 7.7 High · Not analysed yet · Published 14 Jun 2024 · Tags: Broken access control
- [Passwords are stored in clear-text logs.](https://agentprime.io/advisories/CVE-2024-27154.md)
  `CVE-2024-27154` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 6.2 Medium · Not analysed yet · Published 14 Jun 2024 · Tags: Information disclosure
- [Local Privilege Escalation and Remote Code Execution](https://agentprime.io/advisories/CVE-2024-27153.md)
  `CVE-2024-27153` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 7.4 High · Not analysed yet · Published 14 Jun 2024 · Tags: Broken access control
- [Local Privilege Escalation and Remote Code Execution using insecure permissions](https://agentprime.io/advisories/CVE-2024-27152.md)
  `CVE-2024-27152` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 7.4 High · Not analysed yet · Published 14 Jun 2024 · Tags: Broken access control
- [Local Privilege Escalation and Remote Code Execution using insecure permissions](https://agentprime.io/advisories/CVE-2024-27151.md)
  `CVE-2024-27151` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 7.4 High · Not analysed yet · Published 14 Jun 2024 · Tags: Broken access control
- [Local Privilege Escalation and Remote Code Execution using insecure LD_LIBRARY_PATH](https://agentprime.io/advisories/CVE-2024-27150.md)
  `CVE-2024-27150` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 7.4 High · Not analysed yet · Published 14 Jun 2024 · Tags: Broken access control
- [Local Privilege Escalation and Remote Code Execution using insecure LD_PRELOAD](https://agentprime.io/advisories/CVE-2024-27149.md)
  `CVE-2024-27149` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 7.4 High · Not analysed yet · Published 14 Jun 2024 · Tags: Broken access control
- [Local Privilege Escalation and Remote Code Execution using insecure PATH](https://agentprime.io/advisories/CVE-2024-27148.md)
  `CVE-2024-27148` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 7.4 High · Not analysed yet · Published 14 Jun 2024 · Tags: Broken access control
- [Local Privilege Escalation and Remote Code Execution using snmpd](https://agentprime.io/advisories/CVE-2024-27147.md)
  `CVE-2024-27147` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 7.4 High · Not analysed yet · Published 14 Jun 2024 · Tags: Privilege escalation
- [Lack of privileges separation](https://agentprime.io/advisories/CVE-2024-27146.md)
  `CVE-2024-27146` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 6.7 Medium · Not analysed yet · Published 14 Jun 2024 · Tags: Privilege escalation
- [Multiple Post-authenticated Remote Code Execution](https://agentprime.io/advisories/CVE-2024-27145.md)
  `CVE-2024-27145` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jun 2024 · Tags: Path traversal
- [Pre-authenticated Remote Code Execution](https://agentprime.io/advisories/CVE-2024-27144.md)
  `CVE-2024-27144` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jun 2024 · Tags: Path traversal, Broken access control
- [Pre-authenticated Remote Code Execution](https://agentprime.io/advisories/CVE-2024-27143.md)
  `CVE-2024-27143` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jun 2024 · Tags: Privilege escalation
- [Pre-authenticated XXE injection](https://agentprime.io/advisories/CVE-2024-27142.md)
  `CVE-2024-27142` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 5.9 Medium · Not analysed yet · Published 14 Jun 2024 · Tags: Denial of service
- [Pre-authenticated Time-Based Blind XXE injection](https://agentprime.io/advisories/CVE-2024-27141.md)
  `CVE-2024-27141` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 5.9 Medium · Not analysed yet · Published 14 Jun 2024 · Tags: Denial of service

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=toshiba-tec-corporation-toshiba-tec-e-studio-multi-function-peripheral-mfp>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/toshiba-tec-corporation-toshiba-tec-e-studio-multi-function-peripheral-mfp/>. Everything for agents: <https://agentprime.io/llms.txt>.