What’s Vulnerable › Vulnerabilities

CVE-2024-27177: Remote Code Execution

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-14 · updated 2026-06-17
• Weakness: CWE-22

Description

An attacker can get Remote Code Execution by overwriting files. Overwriting files is enable by falsifying package name variable. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL.

Affected products

• Toshibatec E-Studio-2010-Ac: all versions
• Toshibatec E-Studio-2015-Nc: all versions
• Toshibatec E-Studio-2018 A: all versions
• Toshibatec E-Studio-2020 Ac: all versions
• Toshibatec E-Studio-2021 Ac: all versions
• Toshibatec E-Studio-2110-Ac: all versions
• Toshibatec E-Studio-2510-Ac: all versions
• Toshibatec E-Studio-2515-Nc: all versions
• Toshibatec E-Studio-2518 A: all versions
• Toshibatec E-Studio-2520 Nc: all versions
• Toshibatec E-Studio-2521 Ac: all versions
• Toshibatec E-Studio-2525 Ac: all versions
• Toshibatec E-Studio-2528-A: all versions
• Toshibatec E-Studio-2610-Ac: all versions
• Toshibatec E-Studio-2615-Nc: all versions
• Toshibatec E-Studio-2618 A: all versions
• Toshibatec E-Studio-3015-Nc: all versions
• Toshibatec E-Studio-3018 A: all versions
• Toshibatec E-Studio-3025 Ac: all versions
• Toshibatec E-Studio-3028-A: all versions
• Toshibatec E-Studio-3115-Nc: all versions
• Toshibatec E-Studio-3118 A: all versions
• Toshibatec E-Studio-3118 Ag: all versions
• Toshibatec E-Studio-330-Ac: all versions
• Toshibatec E-Studio-3515-Nc: all versions
• Toshibatec E-Studio-3525 Ac: all versions
• Toshibatec E-Studio-3525 Acg: all versions
• Toshibatec E-Studio-3528-A: all versions
• Toshibatec E-Studio-3528-Ag: all versions
• Toshibatec E-Studio-3615-Nc: all versions

References

• http://seclists.org/fulldisclosure/2024/Jul/1
• https://jvn.jp/en/vu/JVNVU97136265/index.html
• https://www.toshibatec.com/information/20240531_01.html
• https://www.toshibatec.com/information/pdf/information20240531_01.pdf
• http://seclists.org/fulldisclosure/2024/Jul/1
• https://jvn.jp/en/vu/JVNVU97136265/index.html
• https://www.toshibatec.com/information/20240531_01.html
• https://www.toshibatec.com/information/pdf/information20240531_01.pdf

Get alerted when CVE-2024-27177 or the next vulnerability affects your stack