CVE-2024-27170CWE-798

Hardcoded credentials for WebDAV access

High · published June 14, 2024

CVSS v3.1
7.4
EPSS
0%
Percentile
18.8
In the wild
Unconfirmed
What it is

It was observed that all the Toshiba printers contain credentials used for WebDAV access in the readable file. Then, it is possible to get a full access with WebDAV to the printer. As for the affected products/models/versions, see the reference URL.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00274 · 18.8th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2024-06-14T03:56Z
EPSS history
Timeline
  • 14 JUN 03:56Z
    Hardcoded credentials for WebDAV access
    cvelistv5