cve/2024/CVE-2024-27166.md

### [CVE-2024-27166](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27166)
![](https://img.shields.io/static/v1?label=Product&message=Toshiba%20Tec%20e-Studio%20multi-function%20peripheral%20(MFP)&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20see%20the%20reference%20URL%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-256%20Plaintext%20Storage%20of%20a%20Password&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-276%20Incorrect%20Default%20Permissions&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-319%20Cleartext%20Transmission%20of%20Sensitive%20Information&color=brighgreen)

### Description

Coredump binaries in Toshiba printers have incorrect permissions. A local attacker can steal confidential information. As for the affected products/models/versions, see the reference URL.

### POC

#### Reference
- http://seclists.org/fulldisclosure/2024/Jul/1

#### Github
No PoCs found on GitHub currently.