CVE-2024-27144

CVE-2024-27144 is a critical vulnerability affecting Toshiba printers, allowing unauthenticated file uploads via the web interface and subsequent local privilege escalation. This enables remote attackers to overwrite insecure files, replace legitimate programs with malicious ones, and fully compromise affected devices. With a CVSS score of 9.8 (CRITICAL), the vulnerability is easily exploitable over the network with low attack complexity and no user interaction, leading to complete confidentiality, integrity, and availability compromise. While not yet observed in active exploitation and lacking public exploit code, its high severity and potential for remote compromise warrant immediate attention.