Toshiba Tec Corporation 厂商相关 44 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
Toshiba Tec Corporation 主要提供办公自动化设备、打印机及影像解决方案。其软件产品历史漏洞多集中于远程代码执行、身份认证绕过及跨站脚本攻击,常因固件或Web管理界面设计缺陷导致。近期安全事件显示,部分设备存在未授权访问风险,攻击者可利用配置错误获取系统控制权。厂商已发布多项补丁修复已知缺陷,建议用户及时更新固件以保障系统安全,避免敏感数据泄露。
| CVE ID | タイトル | CVSS | 深刻度 | 公開日 |
|---|---|---|---|---|
| CVE-2024-48870 | Sharp MFP 安全漏洞 — e-STUDIO 908CWE-79 | 6.2 | Medium | 2024-10-25 |
| CVE-2024-3498 | Incorrect Permission Assignment Privilege Escalation Vulnerability — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-250 | 7.8 | High | 2024-06-14 |
| CVE-2024-3497 | Directory Traversal Remote Code Execution Vulnerability — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-23 | 8.8 | High | 2024-06-14 |
| CVE-2024-3496 | Authentication Bypass Vulnerability — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-288 | 8.8 | High | 2024-06-14 |
| CVE-2024-27180 | TOCTOU vulnerability — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-276 | 6.7 | Medium | 2024-06-14 |
| CVE-2024-27179 | Session disclosure inside the log files — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-1295 | 4.7 | Medium | 2024-06-14 |
| CVE-2024-27178 | Remote Code Execution — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-22 | 7.2 | High | 2024-06-14 |
| CVE-2024-27177 | Remote Code Execution — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-22 | 7.2 | High | 2024-06-14 |
| CVE-2024-27176 | Remote Code Execution — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-22 | 7.2 | High | 2024-06-14 |
| CVE-2024-27175 | Local File Inclusion — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-73 | 4.4 | Medium | 2024-06-14 |
| CVE-2024-27174 | insecure upload — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-22 | 9.8 | Critical | 2024-06-14 |
| CVE-2024-27173 | insecure upload — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-22 | 9.8 | Critical | 2024-06-14 |
| CVE-2024-27172 | Remote Code Execution — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-78 | 9.8 | Critical | 2024-06-14 |
| CVE-2024-27171 | Insecure permissions — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-276 | 7.4 | High | 2024-06-14 |
| CVE-2024-27170 | Hardcoded credentials for WebDAV access — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-798 | 7.4 | High | 2024-06-14 |
| CVE-2024-27169 | Lack of authentication — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-306 | 8.4 | High | 2024-06-14 |
| CVE-2024-27168 | Hardcoded keys used to generate authentication cookies — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-798 | 7.1 | High | 2024-06-14 |
| CVE-2024-27167 | Insecure permissions — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-276 | 7.4 | High | 2024-06-14 |
| CVE-2024-27166 | Insecure permissions — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-276 | 7.4 | High | 2024-06-14 |
| CVE-2024-27165 | Local Privilege Escalation — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-272 | 7.8 | High | 2024-06-14 |
| CVE-2024-27164 | Hardcoded credentials — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-259 | 7.1 | High | 2024-06-14 |
| CVE-2024-27163 | Leak of admin password and passwords — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-319 | 6.5 | Medium | 2024-06-14 |
| CVE-2024-27162 | DOM-based XSS — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-79 | 6.1 | Medium | 2024-06-14 |
| CVE-2024-27161 | Hardcoded password used to encrypt files — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-798 | 6.2 | Medium | 2024-06-14 |
| CVE-2024-27160 | Hardcoded password used to encrypt logs and use of weak cipher — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-798 | 6.2 | Medium | 2024-06-14 |
| CVE-2024-27159 | Hardcoded password used to encrypt logs — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-798 | 6.2 | Medium | 2024-06-14 |
| CVE-2024-27158 | Hardcoded root password — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-1392 | 7.4 | High | 2024-06-14 |
| CVE-2024-27157 | Leak of authentication sessions in secure logs — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-532 | 6.8 | Medium | 2024-06-14 |
| CVE-2024-27156 | Leak of authentication sessions in secure logs — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-532 | 6.8 | Medium | 2024-06-14 |
| CVE-2024-27155 | Local Privilege Escalation and Remote Code Execution using insecure permissions — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-276 | 7.7 | High | 2024-06-14 |
本页汇总了 Toshiba Tec Corporation 厂商截至目前公开的全部 44 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。