CVE-2024-27169

8.4 highEPSS 0.3%

High (8.4). EPSS 0.3% chance of exploitation in the next 30 days.

Toshiba printers provides API without authentication for internal access. A local attacker can bypass authentication in applications, providing administrative access. As for the affected products/models/versions, see the reference URL.

Severity

CVSS 3.1

8.4 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2024-06-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

http://seclists.org/fulldisclosure/2024/Jul/1
https://jvn.jp/en/vu/JVNVU97136265/index.html
https://www.toshibatec.com/information/20240531_01.html
https://www.toshibatec.com/information/pdf/information20240531_01.pdf
http://seclists.org/fulldisclosure/2024/Jul/1

Check your stack JSON