CVE-2024-27162mediumCWE-79

CVE-2024-27162: medium-severity vulnerability in Toshiba Tec e-Studio multi-function peripheral…

DOM-based XSS

Published · Updated

Follow this CVE+ Monitor Toshiba Tec e-Studio multi-function peripheral

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

18Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.1epss 21%
Toshiba printers provide a web interface that will load the JavaScript file. The file contains insecure codes vulnerable to XSS and is loaded inside all the webpages provided by the printer. An attacker can steal the cookie of an admin user. As for the affected products/models/versions, see the reference URL.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected products
Toshiba Tec Corporation · Toshiba Tec e-Studio multi-function peripheral (MFP)
Related CVEs — Toshiba Tec e-Studio multi-function peripheral…

In the same product, most dangerous first.

CVE-2024-27172CRITICALRemote Code ExecutionEPSS 26.8%CVE-2024-27173CRITICALinsecure uploadEPSS 3.2%CVE-2024-27174CRITICALinsecure uploadEPSS 1.6%CVE-2024-27178HIGHRemote Code ExecutionEPSS 1.5%CVE-2024-27177HIGHRemote Code ExecutionEPSS 1.5%CVE-2024-27176HIGHRemote Code ExecutionEPSS 1.5%