CVE-2024-27178CWE-22

Remote Code Execution

High · published June 14, 2024

CVSS v3.1
7.2
EPSS
2%
Percentile
74.1
In the wild
Unconfirmed
What it is

An attacker can get Remote Code Execution by overwriting files. Overwriting files is enable by falsifying file name variable. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point.

https://www.toshibatec.com/contacts/products/

As for the affected products/models/versions, see the reference URL.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01504 · 74.1th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2024-06-14T04:08Z
EPSS history
Timeline
  • 14 JUN 04:08Z
    Remote Code Execution
    cvelistv5