CVE-2024-27168 | BDVDB-2026-239796 Detail
Toshiba TecToshiba Tec e-Studio multi-function peripheral (MFP)
Description#
It appears that some hardcoded keys are used for authentication to internal API. Knowing these private keys may allow attackers to bypass authentication and reach administrative interfaces. As for the affected products/models/versions, see the reference URL.
Impact#
CAPEC-37 Retrieve Embedded Sensitive Data
Weaknesses#
- CWE-798 Use of Hard-coded Credentials
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.