CVE-2024-27179: Toshiba Tec Corporation Toshiba Tec E-Studio Multi-Function Peripheral Mfp

Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days.

Admin cookies are written in clear-text in logs. An attacker can retrieve them and bypass the authentication mechanism. As for the affected products/models/versions, see the reference URL.

Affected products

• Toshiba Tec Corporation Toshiba Tec E-Studio Multi-Function Peripheral Mfp
• Toshibatec E-Studio-2010-Ac: any version
• Toshibatec E-Studio-2015-Nc: any version
• Toshibatec E-Studio-2020 Ac: any version
• Toshibatec E-Studio-2021 Ac: any version
• Toshibatec E-Studio-2110-Ac: any version
• Toshibatec E-Studio-2510-Ac: any version
• Toshibatec E-Studio-2515-Nc: any version
• Toshibatec E-Studio-2520 Nc: any version
• Toshibatec E-Studio-2521 Ac: any version
• Toshibatec E-Studio-2525 Ac: any version
• Toshibatec E-Studio-2528-A: any version
• Toshibatec E-Studio-2610-Ac: any version
• Toshibatec E-Studio-2615-Nc: any version
• Toshibatec E-Studio-3015-Nc: any version
• Toshibatec E-Studio-3025 Ac: any version
• Toshibatec E-Studio-3028-A: any version
• Toshibatec E-Studio-3115-Nc: any version
• Toshibatec E-Studio-330-Ac: any version
• Toshibatec E-Studio-3515-Nc: any version
• Toshibatec E-Studio-3525 Ac: any version
• Toshibatec E-Studio-3525 Acg: any version
• Toshibatec E-Studio-3528-A: any version
• Toshibatec E-Studio-3528-AG: any version
• Toshibatec E-Studio-3615-Nc: any version
• and 16 more

Published 2024-06-14. Last modified 2026-06-17.