CVE-2024-27168

CVSS V2 None CVSS V3 None
Description
It appears that some hardcoded keys are used for authentication to internal API. Knowing these private keys may allow attackers to bypass authentication and reach administrative interfaces. As for the affected products/models/versions, see the reference URL.
Overview
  • CVE ID
  • CVE-2024-27168
  • Assigner
  • Toshiba
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-06-14T03:53:58.804Z
  • Last Modified Date
  • 2024-06-14T18:49:09.738Z
Weakness Enumerations
CWE URL
CWE-798 http://cwe.mitre.org/data/definitions/798.html
References
Reference URL Reference Tags
https://www.toshibatec.com/information/20240531_01.html
https://www.toshibatec.com/information/pdf/information20240531_01.pdf
https://jvn.jp/en/vu/JVNVU97136265/index.html
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2024-27168
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27168
History
Created Old Value New Value Data Type Notes
2024-06-26 01:38:17 Added to TrackCVE