Advisories · Technology
Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP).
Every CVE that names Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.8 High
Incorrect Permission Assignment Privilege Escalation Vulnerability
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Privilege escalation
- CVSS 8.8 High
Directory Traversal Remote Code Execution Vulnerability
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Path traversal
- CVSS 8.8 High
Authentication Bypass Vulnerability
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Authentication bypass
- CVSS 6.7 Medium
TOCTOU vulnerability
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Broken access control
- CVSS 4.7 Medium
Session disclosure inside the log files
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- CWE-1295
- CVSS 7.2 High
Remote Code Execution
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Path traversal
- CVSS 7.2 High
Remote Code Execution
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Path traversal
- CVSS 7.2 High
Remote Code Execution
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Path traversal
- CVSS 4.4 Medium
Local File Inclusion
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Path traversal
- CVSS 9.8 CriticalCritical · CVSS 9+
insecure upload
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Path traversal
- CVSS 9.8 CriticalCritical · CVSS 9+
insecure upload
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Path traversal
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Remote Code Execution
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Command injection
- CVSS 7.4 High
Insecure permissions
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Broken access control
- CVSS 7.4 High
Hardcoded credentials for WebDAV access
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Hard-coded credentials
- CVSS 8.4 High
Lack of authentication
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Authentication bypass
- CVSS 7.1 High
Hardcoded keys used to generate authentication cookies
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Hard-coded credentials
- CVSS 7.4 High
Insecure permissions
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Broken access control
- CVSS 7.4 High
Insecure permissions
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Broken access control
- Weak cryptography or TLS
- CVSS 7.8 High
Local Privilege Escalation
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- CWE-272
- CVSS 7.1 High
Hardcoded credentials
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Hard-coded credentials
- CVSS 6.5 Medium
Leak of admin password and passwords
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Weak cryptography or TLS
- CVSS 6.1 Medium
DOM-based XSS
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Cross-site scripting (XSS)
- CVSS 6.2 Medium
Hardcoded password used to encrypt files
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Hard-coded credentials
- CVSS 6.2 Medium
Hardcoded password used to encrypt logs and use of weak cipher
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Hard-coded credentials
- CVSS 6.2 Medium
Hardcoded password used to encrypt logs
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Hard-coded credentials
- CVSS 7.4 High
Hardcoded root password
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- CWE-1392
- CVSS 6.8 Medium
Leak of authentication sessions in secure logs
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Information disclosure
- CVSS 6.8 Medium
Leak of authentication sessions in secure logs
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Information disclosure
- CVSS 7.7 High
Local Privilege Escalation and Remote Code Execution using insecure permissions
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Broken access control
- CVSS 6.2 Medium
Passwords are stored in clear-text logs.
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Information disclosure
- CVSS 7.4 High
Local Privilege Escalation and Remote Code Execution
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Broken access control
- CVSS 7.4 High
Local Privilege Escalation and Remote Code Execution using insecure permissions
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Broken access control
- CVSS 7.4 High
Local Privilege Escalation and Remote Code Execution using insecure permissions
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Broken access control
- CVSS 7.4 High
Local Privilege Escalation and Remote Code Execution using insecure LD_LIBRARY_PATH
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Broken access control
- CVSS 7.4 High
Local Privilege Escalation and Remote Code Execution using insecure LD_PRELOAD
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Broken access control
- CVSS 7.4 High
Local Privilege Escalation and Remote Code Execution using insecure PATH
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Broken access control
- CVSS 7.4 High
Local Privilege Escalation and Remote Code Execution using snmpd
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Privilege escalation
- CVSS 6.7 Medium
Lack of privileges separation
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Privilege escalation
- CVSS 9.8 CriticalCritical · CVSS 9+
Multiple Post-authenticated Remote Code Execution
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Path traversal
- CVSS 9.8 CriticalCritical · CVSS 9+
Pre-authenticated Remote Code Execution
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Path traversal
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
Pre-authenticated Remote Code Execution
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Privilege escalation
- CVSS 5.9 Medium
Pre-authenticated XXE injection
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Denial of service
- CVSS 5.9 Medium
Pre-authenticated Time-Based Blind XXE injection
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- Denial of service