Vulnerabilidades em Toshiba Tec Corporation

72 resultados
Análise Vexday

Com 69 CVEs catalogadas e nenhuma atualmente registrada no catálogo CISA KEV, a Toshiba Tec Corporation apresenta taxa de exploração ativa abaixo da média geral do catálogo, o que indica menor pressão imediata de ameaças confirmadas em ambiente real. No entanto, 11 vulnerabilidades de severidade crítica merecem atenção, especialmente CVE-2024-33610, que concentra o maior escore EPSS observado no conjunto (0,4514), sugerindo probabilidade relevante de exploração futura. O tipo de falha mais recorrente é CWE-276 (permissões padrão incorretas), padrão que costuma indicar problemas estruturais na configuração de controles de acesso em produtos do fornecedor. A existência de ao menos um PoC público no portfólio reforça a necessidade de monitoramento contínuo, mesmo na ausência de novos registros nos últimos 90 dias.

CVE-2024-27151HIGHLocal Privilege Escalation and Remote Code Execution using insecure permissionsEPSS 0.4%CVE-2024-21824MEDIUMImproper authentication vulnerability in exists in multiple printers and scanners which implement Web Based Management provided by BROTHER IEPSS 0.3%CVE-2024-47801HIGHSharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerabilityEPSS 0.3%CVE-2024-47549HIGHSharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP reEPSS 0.3%CVE-2024-48870MEDIUMSharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerabilityEPSS 0.3%CVE-2024-3498HIGHIncorrect Permission Assignment Privilege Escalation VulnerabilityEPSS 0.3%CVE-2026-63563MEDIUMSharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication feature disabled in EPSS 0.3%CVE-2024-27169HIGHLack of authenticationEPSS 0.3%CVE-2024-27168HIGHHardcoded keys used to generate authentication cookiesEPSS 0.3%CVE-2024-22475MEDIUMCross-site request forgery vulnerability in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIEPSS 0.3%CVE-2024-27158HIGHHardcoded root passwordEPSS 0.3%CVE-2024-27170HIGHHardcoded credentials for WebDAV accessEPSS 0.3%CVE-2024-27180MEDIUMTOCTOU vulnerabilityEPSS 0.3%CVE-2024-27147HIGHLocal Privilege Escalation and Remote Code Execution using snmpdEPSS 0.3%CVE-2024-27159MEDIUMHardcoded password used to encrypt logsEPSS 0.3%CVE-2024-27179MEDIUMSession disclosure inside the log filesEPSS 0.3%CVE-2024-27164HIGHHardcoded credentialsEPSS 0.3%CVE-2024-27154MEDIUMPasswords are stored in clear-text logs.EPSS 0.3%CVE-2024-27152HIGHLocal Privilege Escalation and Remote Code Execution using insecure permissionsEPSS 0.2%CVE-2024-27153HIGHLocal Privilege Escalation and Remote Code ExecutionEPSS 0.2%