CVE-2024-27169: Toshiba Tec Corporation Toshiba Tec E-Studio Multi-Function Peripheral Mfp

High severity, CVSS 8.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Toshiba printers provides API without authentication for internal access. A local attacker can bypass authentication in applications, providing administrative access. As for the affected products/models/versions, see the reference URL.

Affected products

• Toshiba Tec Corporation Toshiba Tec E-Studio Multi-Function Peripheral Mfp
• Toshibatec E-Studio-2010-Ac: any version
• Toshibatec E-Studio-2015-Nc: any version
• Toshibatec E-Studio-2018 A: any version
• Toshibatec E-Studio-2020 Ac: any version
• Toshibatec E-Studio-2021 Ac: any version
• Toshibatec E-Studio-2110-Ac: any version
• Toshibatec E-Studio-2510-Ac: any version
• Toshibatec E-Studio-2515-Nc: any version
• Toshibatec E-Studio-2518 A: any version
• Toshibatec E-Studio-2520 Nc: any version
• Toshibatec E-Studio-2521 Ac: any version
• Toshibatec E-Studio-2525 Ac: any version
• Toshibatec E-Studio-2528-A: any version
• Toshibatec E-Studio-2610-Ac: any version
• Toshibatec E-Studio-2615-Nc: any version
• Toshibatec E-Studio-2618 A: any version
• Toshibatec E-Studio-3015-Nc: any version
• Toshibatec E-Studio-3018 A: any version
• Toshibatec E-Studio-3025 Ac: any version
• Toshibatec E-Studio-3028-A: any version
• Toshibatec E-Studio-3115-Nc: any version
• Toshibatec E-Studio-3118 A: any version
• Toshibatec E-Studio-3118 AG: any version
• Toshibatec E-Studio-330-Ac: any version
• and 26 more

Published 2024-06-14. Last modified 2026-06-17.