CVE-2024-27169
Awaiting Analysis
Awaiting Analysis - Queue
BaseFortify
Publication date: 2024-06-14
Last updated on: 2024-11-21
Assigner: Toshiba Corporation
Description
Description
Toshiba printers provides API without authentication for internal access. A local attacker can bypass authentication in applications, providing administrative access. As for the affected products/models/versions, see the reference URL.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Currently, no data is known.
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-306 | The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. |