CVE-2024-27166 - Insecure permissions

Back Back to CVE browser

HIGH

Insecure permissions

Published Jun 14, 2024

7.4

HIGH

CVSS 3.1

EPSS 0.17%

Description

Coredump binaries in Toshiba printers have incorrect permissions. A local attacker can steal confidential information. As for the affected products/models/versions, see the reference URL.

Affected products

Vendor Toshiba Tec Corporation Product Toshiba Tec e-Studio multi-function peripheral (MFP) Default
unaffected
- Version
  see the reference URL
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Toshiba Tec Corporation

Toshiba Tec e-Studio multi-function peripheral (MFP)

unaffected

Version	Status	Constraints
see the reference URL	affected	-

Vendor Toshibatec Product E-Studio-2010-AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2015-NC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2018 A Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2020 AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2021 AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2110-AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2510-AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2515-NC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2518 A Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2520 NC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2521 AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2525 AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2528-A Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2610-AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2615-NC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2618 A Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-3015-NC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-3018 A Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-3025 AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-3028-A Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-3115-NC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-3118 A Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-3118 AG Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-330-AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-3515-NC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-3525 AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-3525 Acg Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-3528-A Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-3528-AG Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-3615-NC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-400-AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-4515 AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-4525 AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-4528-A Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-4528-AG Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-4615 AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-5015 AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-5115 AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-5525 AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-5525 Acg Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-5528-A Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-6525 AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-6525 Acg Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-6526-AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-6527-AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-6528-A Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-6529-A Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-7527-AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-7529-A Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-9029-A Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Toshibatec

E-Studio-2010-AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2015-NC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2018 A

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2020 AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2021 AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2110-AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2510-AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2515-NC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2518 A

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2520 NC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2521 AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2525 AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2528-A

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2610-AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2615-NC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2618 A

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-3015-NC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-3018 A

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-3025 AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-3028-A

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-3115-NC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-3118 A

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-3118 AG

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-330-AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-3515-NC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-3525 AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-3525 Acg

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-3528-A

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-3528-AG

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-3615-NC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-400-AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-4515 AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-4525 AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-4528-A

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-4528-AG

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-4615 AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-5015 AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-5115 AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-5525 AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-5525 Acg

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-5528-A

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-6525 AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-6525 Acg

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-6526-AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-6527-AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-6528-A

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-6529-A

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-7527-AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-7529-A

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-9029-A

n/a

Version	Status	Constraints
0	affected	<=*

Remediation

Vendor solution

This issue is fixed in the version released on June 14, 2024 and all later versions.

Weaknesses (3)

CWE-256

CWE-276

Incorrect Default Permissions

CWE-319

References (5)

Link	Providers	Tags
http://seclists.org/fulldisclosure/2024/Jul/1
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-24407		Advisory
https://jvn.jp/en/vu/JVNVU97136265/index.html
https://www.toshibatec.com/information/20240531_01.html
https://www.toshibatec.com/information/pdf/information20240531_01.pdf