What’s Vulnerable › Vulnerabilities

CVE-2024-27174: insecure upload

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-14 · updated 2026-06-17
• Weakness: CWE-22

Description

Remote Command program allows an attacker to get Remote Code Execution. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL.

Affected products

• Toshibatec E-Studio-2010-Ac: all versions
• Toshibatec E-Studio-2015-Nc: all versions
• Toshibatec E-Studio-2018 A: all versions
• Toshibatec E-Studio-2020 Ac: all versions
• Toshibatec E-Studio-2021 Ac: all versions
• Toshibatec E-Studio-2110-Ac: all versions
• Toshibatec E-Studio-2510-Ac: all versions
• Toshibatec E-Studio-2515-Nc: all versions
• Toshibatec E-Studio-2518 A: all versions
• Toshibatec E-Studio-2520 Nc: all versions
• Toshibatec E-Studio-2521 Ac: all versions
• Toshibatec E-Studio-2525 Ac: all versions
• Toshibatec E-Studio-2528-A: all versions
• Toshibatec E-Studio-2610-Ac: all versions
• Toshibatec E-Studio-2615-Nc: all versions
• Toshibatec E-Studio-2618 A: all versions
• Toshibatec E-Studio-3015-Nc: all versions
• Toshibatec E-Studio-3018 A: all versions
• Toshibatec E-Studio-3025 Ac: all versions
• Toshibatec E-Studio-3028-A: all versions
• Toshibatec E-Studio-3115-Nc: all versions
• Toshibatec E-Studio-3118 A: all versions
• Toshibatec E-Studio-3118 Ag: all versions
• Toshibatec E-Studio-330-Ac: all versions
• Toshibatec E-Studio-3515-Nc: all versions
• Toshibatec E-Studio-3525 Ac: all versions
• Toshibatec E-Studio-3525 Acg: all versions
• Toshibatec E-Studio-3528-A: all versions
• Toshibatec E-Studio-3528-Ag: all versions
• Toshibatec E-Studio-3615-Nc: all versions

References

• http://seclists.org/fulldisclosure/2024/Jul/1
• https://jvn.jp/en/vu/JVNVU97136265/index.html
• https://www.toshibatec.com/information/20240531_01.html
• https://www.toshibatec.com/information/pdf/information20240531_01.pdf
• http://seclists.org/fulldisclosure/2024/Jul/1
• https://jvn.jp/en/vu/JVNVU97136265/index.html
• https://www.toshibatec.com/information/20240531_01.html
• https://www.toshibatec.com/information/pdf/information20240531_01.pdf

Get alerted when CVE-2024-27174 or the next vulnerability affects your stack