What’s Vulnerable › Vulnerabilities

CVE-2024-27151: Local Privilege Escalation and Remote Code Execution using insecure permissions

• Severity: high (CVSS 7.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-14 · updated 2026-06-17
• Weakness: CWE-276

Description

The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. The programs can be replaced by malicious programs by any local or remote attacker. As for the affected products/models/versions, see the reference URL.

Affected products

• Toshibatec E-Studio-2010-Ac: all versions
• Toshibatec E-Studio-2015-Nc: all versions
• Toshibatec E-Studio-2018 A: all versions
• Toshibatec E-Studio-2020 Ac: all versions
• Toshibatec E-Studio-2021 Ac: all versions
• Toshibatec E-Studio-2110-Ac: all versions
• Toshibatec E-Studio-2510-Ac: all versions
• Toshibatec E-Studio-2515-Nc: all versions
• Toshibatec E-Studio-2518 A: all versions
• Toshibatec E-Studio-2520 Nc: all versions
• Toshibatec E-Studio-2521 Ac: all versions
• Toshibatec E-Studio-2525 Ac: all versions
• Toshibatec E-Studio-2528-A: all versions
• Toshibatec E-Studio-2610-Ac: all versions
• Toshibatec E-Studio-2615-Nc: all versions
• Toshibatec E-Studio-2618 A: all versions
• Toshibatec E-Studio-3015-Nc: all versions
• Toshibatec E-Studio-3018 A: all versions
• Toshibatec E-Studio-3025 Ac: all versions
• Toshibatec E-Studio-3028-A: all versions
• Toshibatec E-Studio-3115-Nc: all versions
• Toshibatec E-Studio-3118 A: all versions
• Toshibatec E-Studio-3118 Ag: all versions
• Toshibatec E-Studio-330-Ac: all versions
• Toshibatec E-Studio-3515-Nc: all versions
• Toshibatec E-Studio-3525 Ac: all versions
• Toshibatec E-Studio-3525 Acg: all versions
• Toshibatec E-Studio-3528-A: all versions
• Toshibatec E-Studio-3528-Ag: all versions
• Toshibatec E-Studio-3615-Nc: all versions

References

• http://seclists.org/fulldisclosure/2024/Jul/1
• https://jvn.jp/en/vu/JVNVU97136265/index.html
• https://www.toshibatec.com/information/20240531_01.html
• https://www.toshibatec.com/information/pdf/information20240531_01.pdf
• http://seclists.org/fulldisclosure/2024/Jul/1
• https://jvn.jp/en/vu/JVNVU97136265/index.html
• https://www.toshibatec.com/information/20240531_01.html
• https://www.toshibatec.com/information/pdf/information20240531_01.pdf

Get alerted when CVE-2024-27151 or the next vulnerability affects your stack