CVE-2024-27145: Multiple Post-authenticated Remote Code Execution
The Toshiba printers provide several ways to upload files using the admin web interface. An attacker can remotely compromise any Toshiba printer. An attacker can overwrite any insecure files. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27145?
CVE-2024-27145 is rated as a high severity vulnerability due to its potential for remote exploitation and significant impact on Toshiba printers.
How do I fix CVE-2024-27145?
To mitigate CVE-2024-27145, it is recommended to apply the latest firmware updates provided by Toshiba for affected printer models.
What types of Toshiba printers are affected by CVE-2024-27145?
CVE-2024-27145 affects various Toshiba printer models that allow file uploads via the admin web interface.
Can CVE-2024-27145 lead to unauthorized access?
Yes, CVE-2024-27145 can potentially allow attackers to gain unauthorized access and overwrite files on affected Toshiba printers.
Are there known exploits for CVE-2024-27145?
As of now, specific exploit details for CVE-2024-27145 have not been publicly disclosed, but the vulnerability's nature allows for exploitation by attackers.