{"id":"CVE-2024-27151","aliases":["EUVD-2024-24392","GHSA-fcmx-p2m4-4m5g"],"status":"published","title":"Local Privilege Escalation and Remote Code Execution using insecure permissions","description":"The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. The programs can be replaced by malicious programs by any local or remote attacker. As for the affected products/models/versions, see the reference URL.","severity":{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00402,"percentile":0.34741,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-276"],"published":"2024-06-14T02:54:05Z","modified":"2026-06-17T07:19:16Z","products":[{"vendor":"toshiba tec corporation","product":"toshiba tec e-studio multi-function peripheral (mfp)"},{"vendor":"toshibatec","product":"e-studio-2010-ac"},{"vendor":"toshibatec","product":"e-studio-2015-nc"},{"vendor":"toshibatec","product":"e-studio-2018_a"},{"vendor":"toshibatec","product":"e-studio-2020_ac"},{"vendor":"toshibatec","product":"e-studio-2021_ac"},{"vendor":"toshibatec","product":"e-studio-2110-ac"},{"vendor":"toshibatec","product":"e-studio-2510-ac"},{"vendor":"toshibatec","product":"e-studio-2515-nc"},{"vendor":"toshibatec","product":"e-studio-2518_a"},{"vendor":"toshibatec","product":"e-studio-2520_nc"},{"vendor":"toshibatec","product":"e-studio-2521_ac"},{"vendor":"toshibatec","product":"e-studio-2525_ac"},{"vendor":"toshibatec","product":"e-studio-2528-a"},{"vendor":"toshibatec","product":"e-studio-2610-ac"},{"vendor":"toshibatec","product":"e-studio-2615-nc"},{"vendor":"toshibatec","product":"e-studio-2618_a"},{"vendor":"toshibatec","product":"e-studio-3015-nc"},{"vendor":"toshibatec","product":"e-studio-3018_a"},{"vendor":"toshibatec","product":"e-studio-3025_ac"},{"vendor":"toshibatec","product":"e-studio-3028-a"},{"vendor":"toshibatec","product":"e-studio-3115-nc"},{"vendor":"toshibatec","product":"e-studio-3118_a"},{"vendor":"toshibatec","product":"e-studio-3118_ag"},{"vendor":"toshibatec","product":"e-studio-330-ac"},{"vendor":"toshibatec","product":"e-studio-3515-nc"},{"vendor":"toshibatec","product":"e-studio-3525_ac"},{"vendor":"toshibatec","product":"e-studio-3525_acg"},{"vendor":"toshibatec","product":"e-studio-3528-a"},{"vendor":"toshibatec","product":"e-studio-3528-ag"},{"vendor":"toshibatec","product":"e-studio-3615-nc"},{"vendor":"toshibatec","product":"e-studio-400-ac"},{"vendor":"toshibatec","product":"e-studio-4515_ac"},{"vendor":"toshibatec","product":"e-studio-4525_ac"},{"vendor":"toshibatec","product":"e-studio-4528-a"},{"vendor":"toshibatec","product":"e-studio-4528-ag"},{"vendor":"toshibatec","product":"e-studio-4615_ac"},{"vendor":"toshibatec","product":"e-studio-5015_ac"},{"vendor":"toshibatec","product":"e-studio-5115_ac"},{"vendor":"toshibatec","product":"e-studio-5525_ac"},{"vendor":"toshibatec","product":"e-studio-5525_acg"},{"vendor":"toshibatec","product":"e-studio-5528-a"},{"vendor":"toshibatec","product":"e-studio-6525_ac"},{"vendor":"toshibatec","product":"e-studio-6525_acg"},{"vendor":"toshibatec","product":"e-studio-6526-ac"},{"vendor":"toshibatec","product":"e-studio-6527-ac"},{"vendor":"toshibatec","product":"e-studio-6528-a"},{"vendor":"toshibatec","product":"e-studio-6529-a"},{"vendor":"toshibatec","product":"e-studio-7527-ac"},{"vendor":"toshibatec","product":"e-studio-7529-a"},{"vendor":"toshibatec","product":"e-studio-9029-a"}],"references":[{"url":"https://www.toshibatec.com/information/20240531_01.html","tags":["x_transferred"]},{"url":"https://www.toshibatec.com/information/pdf/information20240531_01.pdf","tags":["x_transferred"]},{"url":"https://jvn.jp/en/vu/JVNVU97136265/index.html","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2024/Jul/1","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-27151"},{"url":"https://github.com/advisories/GHSA-fcmx-p2m4-4m5g"}],"sources":{"cve":[{"id":"CVE-2024-27151","title":"Local Privilege Escalation and Remote Code Execution using insecure permissions","description":"The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. The programs can be replaced by malicious programs by any local or remote attacker. As for the affected products/models/versions, see the reference URL.","status":"published","published":"2024-06-14T02:54:05.707Z","modified":"2025-02-13T17:41:28.002Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:34:12.982241Z"}],"euvd":[{"id":"EUVD-2024-24392","description":"The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. The programs can be replaced by malicious programs by any local or remote attacker. As for the affected products/models/versions, see the reference URL.","status":"published","published":"2024-06-14T02:54:05Z","modified":"2025-02-13T17:41:28Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:03:46.532099Z"}],"ghsa":[{"id":"GHSA-fcmx-p2m4-4m5g","title":"The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker...","description":"The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. The programs can be replaced by malicious programs by any local or remote attacker. As for the affected products/models/versions, see the reference URL.","status":"published","published":"2024-06-14T03:31:21Z","modified":"2024-07-04T06:35:03Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:57:38.695929Z"}],"nvd":[{"id":"CVE-2024-27151","description":"The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. The programs can be replaced by malicious programs by any local or remote attacker. As for the affected products/models/versions, see the reference URL.","status":"published","published":"2024-06-14T03:15:12.297Z","modified":"2026-06-17T07:19:16.887Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:10:05.620461Z"}]}}