Toshiba TEC Corporation vulnerabilities
79 CVEs and advisories name Toshiba TEC Corporation as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-63563Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication feature disabled in
- CVE-2026-63545Sharp and Toshiba Tec MFPs (multifunction printers) caches data internally when printing, and leave them uncleared.
- CVE-2026-60011Sharp and Toshiba Tec MFPs (multifunction printers) fail to properly authorize requests to directly access certain image data stored to the
- CVE-2025-8452Unauthenticated leak of sensitive information affecting multiple models from Brother Industries, Ltd., Toshiba Tec, and Konica Minolta, Inc.
- CVE-2025-49797Multiple Brother driver installers for Windows contain a privilege escalation vulnerability.
- CVE-2024-51984Authenticated disclosure of external service passwords via pass-back attack affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc.
- CVE-2024-51983Unauthenticated Denial of Service (DoS) via malformed WS-Scan request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc.
- CVE-2024-51981Unauthenticated Server Side Request Forgery (SSRF) via WS-Eventing affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, and Toshiba Tec, and Konica Minolta, Inc.
- CVE-2024-51980Unauthenticated Server Side Request Forgery (SSRF) via WS-Addressing affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc.
- CVE-2024-51978Authentication bypass via default password generation affecting multiple models from Brother Industries, Ltd, Toshiba Tec, and Konica Minolta, Inc.
- CVE-2024-51977Unauthenticated leak of sensitive information affecting multiple models from Brother Industries, Ltd., FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc.
- CVE-2024-36254Out-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple MFPs (multifunction printers), which may l
- CVE-2024-36251The web interface of the affected devices process some crafted HTTP requests improperly, leading to a device crash.
- CVE-2024-36249Cross-site scripting vulnerability exists in Sharp Corporation and Toshiba Tech Corporation multiple MFPs (multifunction printers).
- CVE-2024-36248API keys for some cloud services are hardcoded in the "main" binary.
- CVE-2024-35244There are several hidden accounts.
- CVE-2024-34162The web interface of the affected devices is designed to hide the LDAP credentials even for administrative users.
- CVE-2024-33616Admin authentication can be bypassed with some specific invalid credentials, which allows logging in with an administrative privilege.
- CVE-2024-33610"sessionlist.html" and "sys_trayentryreboot.html" are accessible with no authentication.
- CVE-2024-33605Improper processing of some parameters of installed_emanual_list.html and installed_emanual_down.html leads to a path traversal…
- CVE-2024-32151User passwords are decrypted and stored on memory before any user logged in.
- CVE-2024-29978User passwords are decrypted and stored on memory before any user logged in.
- CVE-2024-29146User passwords are decrypted and stored on memory before any user logged in.
- CVE-2024-28955Affected devices create coredump files when crashed, storing them with world-readable permission.
- CVE-2024-28038The web interface of the affected devices processes a cookie value improperly, leading to a stack buffer overflow.
- CVE-2024-48870Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerability
- CVE-2024-47801Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability
- CVE-2024-47549Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP re
- CVE-2024-47406Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability.
- CVE-2024-47005Sharp and Toshiba Tec MFPs provide configuration related APIs.