# cve.now: Toshiba TEC Corporation

The newest entries naming Toshiba TEC Corporation as an affected vendor (up to 200), of 79 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-63563](https://cve.now/CVE-2026-63563.md): Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication feature disabled in (CVSS 6.5)
- [CVE-2026-63545](https://cve.now/CVE-2026-63545.md): Sharp and Toshiba Tec MFPs (multifunction printers) caches data internally when printing, and leave them uncleared. (CVSS 2.4)
- [CVE-2026-60011](https://cve.now/CVE-2026-60011.md): Sharp and Toshiba Tec MFPs (multifunction printers) fail to properly authorize requests to directly access certain image data stored to the (CVSS 5.3)
- [CVE-2025-8452](https://cve.now/CVE-2025-8452.md): Unauthenticated leak of sensitive information affecting multiple models from Brother Industries, Ltd., Toshiba Tec, and Konica Minolta, Inc. (CVSS 4.3)
- [CVE-2025-49797](https://cve.now/CVE-2025-49797.md): Multiple Brother driver installers for Windows contain a privilege escalation vulnerability. (CVSS 7.8)
- [CVE-2024-51984](https://cve.now/CVE-2024-51984.md): Authenticated disclosure of external service passwords via pass-back attack affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc. (CVSS 6.8)
- [CVE-2024-51983](https://cve.now/CVE-2024-51983.md): Unauthenticated Denial of Service (DoS) via malformed WS-Scan request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc. (CVSS 7.5)
- [CVE-2024-51981](https://cve.now/CVE-2024-51981.md): Unauthenticated Server Side Request Forgery (SSRF) via WS-Eventing affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, and Toshiba Tec, and Konica Minolta, Inc. (CVSS 5.3)
- [CVE-2024-51980](https://cve.now/CVE-2024-51980.md): Unauthenticated Server Side Request Forgery (SSRF) via WS-Addressing affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc. (CVSS 5.3)
- [CVE-2024-51978](https://cve.now/CVE-2024-51978.md): Authentication bypass via default password generation affecting multiple models from Brother Industries, Ltd, Toshiba Tec, and Konica Minolta, Inc. (CVSS 9.8)
- [CVE-2024-51977](https://cve.now/CVE-2024-51977.md): Unauthenticated leak of sensitive information affecting multiple models from Brother Industries, Ltd., FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc. (CVSS 5.3)
- [CVE-2024-36254](https://cve.now/CVE-2024-36254.md): Out-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple MFPs (multifunction printers), which may l (CVSS 7.5)
- [CVE-2024-36251](https://cve.now/CVE-2024-36251.md): The web interface of the affected devices process some crafted HTTP requests improperly, leading to a device crash. (CVSS 7.5)
- [CVE-2024-36249](https://cve.now/CVE-2024-36249.md): Cross-site scripting vulnerability exists in Sharp Corporation and Toshiba Tech Corporation multiple MFPs (multifunction printers). (CVSS 7.4)
- [CVE-2024-36248](https://cve.now/CVE-2024-36248.md): API keys for some cloud services are hardcoded in the "main" binary. (CVSS 9.1)
- [CVE-2024-35244](https://cve.now/CVE-2024-35244.md): There are several hidden accounts. (CVSS 9.1)
- [CVE-2024-34162](https://cve.now/CVE-2024-34162.md): The web interface of the affected devices is designed to hide the LDAP credentials even for administrative users. (CVSS 5.3)
- [CVE-2024-33616](https://cve.now/CVE-2024-33616.md): Admin authentication can be bypassed with some specific invalid credentials, which allows logging in with an administrative privilege. (CVSS 5.3)
- [CVE-2024-33610](https://cve.now/CVE-2024-33610.md): "sessionlist.html" and "sys\_trayentryreboot.html" are accessible with no authentication. (CVSS 9.1)
- [CVE-2024-33605](https://cve.now/CVE-2024-33605.md): Improper processing of some parameters of installed\_emanual\_list.html and installed\_emanual\_down.html leads to a path traversal… (CVSS 7.5)
- [CVE-2024-32151](https://cve.now/CVE-2024-32151.md): User passwords are decrypted and stored on memory before any user logged in. (CVSS 5.9)
- [CVE-2024-29978](https://cve.now/CVE-2024-29978.md): User passwords are decrypted and stored on memory before any user logged in. (CVSS 5.9)
- [CVE-2024-29146](https://cve.now/CVE-2024-29146.md): User passwords are decrypted and stored on memory before any user logged in. (CVSS 5.9)
- [CVE-2024-28955](https://cve.now/CVE-2024-28955.md): Affected devices create coredump files when crashed, storing them with world-readable permission. (CVSS 5.9)
- [CVE-2024-28038](https://cve.now/CVE-2024-28038.md): The web interface of the affected devices processes a cookie value improperly, leading to a stack buffer overflow. (CVSS 9.0)
- [CVE-2024-48870](https://cve.now/CVE-2024-48870.md): Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerability (CVSS 6.2)
- [CVE-2024-47801](https://cve.now/CVE-2024-47801.md): Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability (CVSS 7.4)
- [CVE-2024-47549](https://cve.now/CVE-2024-47549.md): Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP re (CVSS 7.4)
- [CVE-2024-47406](https://cve.now/CVE-2024-47406.md): Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability. (CVSS 9.1)
- [CVE-2024-47005](https://cve.now/CVE-2024-47005.md): Sharp and Toshiba Tec MFPs provide configuration related APIs. (CVSS 8.1)
- [CVE-2024-45842](https://cve.now/CVE-2024-45842.md): Sharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path Traversal vulnerability. (CVSS 5.3)
- [CVE-2024-45829](https://cve.now/CVE-2024-45829.md): Sharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are improperly processed and resul (CVSS 4.9)
- [CVE-2024-43424](https://cve.now/CVE-2024-43424.md): Sharp and Toshiba Tec MFPs improperly process HTTP request headers, resulting in an Out-of-bounds Read vulnerability. (CVSS 7.5)
- [CVE-2024-42420](https://cve.now/CVE-2024-42420.md): Sharp and Toshiba Tec MFPs contain multiple Out-of-bounds Read vulnerabilities, due to improper processing of keyword search input and impro (CVSS 7.5)
- [CVE-2024-3498](https://cve.now/CVE-2024-3498.md): Incorrect Permission Assignment Privilege Escalation Vulnerability (CVSS 7.8)
- [CVE-2024-3497](https://cve.now/CVE-2024-3497.md): Directory Traversal Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2024-3496](https://cve.now/CVE-2024-3496.md): Authentication Bypass Vulnerability (CVSS 8.8)
- [CVE-2024-27180](https://cve.now/CVE-2024-27180.md): TOCTOU vulnerability (CVSS 6.7)
- [CVE-2024-27179](https://cve.now/CVE-2024-27179.md): Session disclosure inside the log files (CVSS 4.7)
- [CVE-2024-27178](https://cve.now/CVE-2024-27178.md): Remote Code Execution (CVSS 7.2)
- [CVE-2024-27177](https://cve.now/CVE-2024-27177.md): Remote Code Execution (CVSS 7.2)
- [CVE-2024-27176](https://cve.now/CVE-2024-27176.md): Remote Code Execution (CVSS 7.2)
- [CVE-2024-27175](https://cve.now/CVE-2024-27175.md): Local File Inclusion (CVSS 4.4)
- [CVE-2024-27174](https://cve.now/CVE-2024-27174.md): insecure upload (CVSS 9.8)
- [CVE-2024-27173](https://cve.now/CVE-2024-27173.md): insecure upload (CVSS 9.8)
- [CVE-2024-27172](https://cve.now/CVE-2024-27172.md): Remote Code Execution (CVSS 9.8)
- [CVE-2024-27171](https://cve.now/CVE-2024-27171.md): Insecure permissions (CVSS 7.4)
- [CVE-2024-27170](https://cve.now/CVE-2024-27170.md): Hardcoded credentials for WebDAV access (CVSS 7.4)
- [CVE-2024-27169](https://cve.now/CVE-2024-27169.md): Lack of authentication (CVSS 8.4)
- [CVE-2024-27168](https://cve.now/CVE-2024-27168.md): Hardcoded keys used to generate authentication cookies (CVSS 7.1)
- [CVE-2024-27167](https://cve.now/CVE-2024-27167.md): Insecure permissions (CVSS 7.4)
- [CVE-2024-27166](https://cve.now/CVE-2024-27166.md): Insecure permissions (CVSS 7.4)
- [CVE-2024-27165](https://cve.now/CVE-2024-27165.md): Local Privilege Escalation (CVSS 7.8)
- [CVE-2024-27164](https://cve.now/CVE-2024-27164.md): Hardcoded credentials (CVSS 7.1)
- [CVE-2024-27163](https://cve.now/CVE-2024-27163.md): Leak of admin password and passwords (CVSS 6.5)
- [CVE-2024-27162](https://cve.now/CVE-2024-27162.md): DOM-based XSS (CVSS 6.1)
- [CVE-2024-27161](https://cve.now/CVE-2024-27161.md): Hardcoded password used to encrypt files (CVSS 6.2)
- [CVE-2024-27160](https://cve.now/CVE-2024-27160.md): Hardcoded password used to encrypt logs and use of weak cipher (CVSS 6.2)
- [CVE-2024-27159](https://cve.now/CVE-2024-27159.md): Hardcoded password used to encrypt logs (CVSS 6.2)
- [CVE-2024-27158](https://cve.now/CVE-2024-27158.md): Hardcoded root password (CVSS 7.4)
- [CVE-2024-27157](https://cve.now/CVE-2024-27157.md): Leak of authentication sessions in secure logs (CVSS 6.8)
- [CVE-2024-27156](https://cve.now/CVE-2024-27156.md): Leak of authentication sessions in secure logs (CVSS 6.8)
- [CVE-2024-27155](https://cve.now/CVE-2024-27155.md): Local Privilege Escalation and Remote Code Execution using insecure permissions (CVSS 7.7)
- [CVE-2024-27154](https://cve.now/CVE-2024-27154.md): Passwords are stored in clear-text logs. (CVSS 6.2)
- [CVE-2024-27153](https://cve.now/CVE-2024-27153.md): Local Privilege Escalation and Remote Code Execution (CVSS 7.4)
- [CVE-2024-27152](https://cve.now/CVE-2024-27152.md): Local Privilege Escalation and Remote Code Execution using insecure permissions (CVSS 7.4)
- [CVE-2024-27151](https://cve.now/CVE-2024-27151.md): Local Privilege Escalation and Remote Code Execution using insecure permissions (CVSS 7.4)
- [CVE-2024-27150](https://cve.now/CVE-2024-27150.md): Local Privilege Escalation and Remote Code Execution using insecure LD\_LIBRARY\_PATH (CVSS 7.4)
- [CVE-2024-27149](https://cve.now/CVE-2024-27149.md): Local Privilege Escalation and Remote Code Execution using insecure LD\_PRELOAD (CVSS 7.4)
- [CVE-2024-27148](https://cve.now/CVE-2024-27148.md): Local Privilege Escalation and Remote Code Execution using insecure PATH (CVSS 7.4)
- [CVE-2024-27147](https://cve.now/CVE-2024-27147.md): Local Privilege Escalation and Remote Code Execution using snmpd (CVSS 7.4)
- [CVE-2024-27146](https://cve.now/CVE-2024-27146.md): Lack of privileges separation (CVSS 6.7)
- [CVE-2024-27145](https://cve.now/CVE-2024-27145.md): Multiple Post-authenticated Remote Code Execution (CVSS 9.8)
- [CVE-2024-27144](https://cve.now/CVE-2024-27144.md): Pre-authenticated Remote Code Execution (CVSS 9.8)
- [CVE-2024-27143](https://cve.now/CVE-2024-27143.md): Pre-authenticated Remote Code Execution (CVSS 9.8)
- [CVE-2024-27142](https://cve.now/CVE-2024-27142.md): Pre-authenticated XXE injection (CVSS 5.9)
- [CVE-2024-27141](https://cve.now/CVE-2024-27141.md): Pre-authenticated Time-Based Blind XXE injection (CVSS 5.9)
- [CVE-2024-22475](https://cve.now/CVE-2024-22475.md): Cross-site request forgery vulnerability in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRI (CVSS 6.1)
- [CVE-2024-21824](https://cve.now/CVE-2024-21824.md): Improper authentication vulnerability in exists in multiple printers and scanners which implement Web Based Management provided by BROTHER I (CVSS 5.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/toshiba-tec
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.