CVE-2024-27171 | BDVDB-2026-239799 Detail
Toshiba TecToshiba Tec e-Studio multi-function peripheral (MFP)
Description#
A remote attacker using the insecure upload functionality will be able to overwrite any Python file and get Remote Code Execution. As for the affected products/models/versions, see the reference URL.
Impact#
CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels
Weaknesses#
- CWE-276 Incorrect Default Permissions
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.