7.5
CVSS 3.1
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.
- Експлоатация: има публичен пример за експлоатация
- Атаката може да се автоматизира
Описание
Оригинално описание
The web interface of the affected devices process some crafted HTTP requests improperly, leading to a device crash. More precisely, a crafted parameter to billcodedef_sub_sel.html is not processed properly and device-crash happens. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
Засегнати продукти
- Sharp Corporation Multiple MFPs (multifunction printers): See the information provided by Sharp Corporation listed under [References]
- Toshiba Tec Corporation Multiple MFPs (multifunction printers): See the information provided by Toshiba Tec Corporation listed under [References]
- sharp mx-m905: 611
- sharp mx-m6070: 502
- sharp mx-m5070: 502
- sharp mx-m4070: 502
- sharp mx-m3570: 502
- sharp mx-m3070: 502
- sharp mx-m6050: 502
- sharp mx-m5050: 502
- sharp mx-m4050: 502
- sharp mx-m3550: 502
- sharp mx-m3050: 502
- sharp mx-m2630: 502
- sharp bp-b550wd: 250
- sharp bp-b540wr: 250
- sharp bp-b547wd: 250
- sharp bp-b537wr: 250
- sharp mx-b455w: 404
- sharp mx-b355w: 404
- sharp mx-b455wz: 404
- sharp mx-b355wz: 404
- sharp mx-b455wt: 404
- sharp mx-b355wt: 404
Вид слабост
История
- 26 ноември 2024 Публикувано
Други уязвимости в Sharp Corporation Multiple MFPs (multifunction printers)
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2024-36251
- https://nvd.nist.gov/vuln/detail/CVE-2024-36251
- https://global.sharp/products/copier/info/info_security_2024-05.html
- https://jp.sharp/business/print/information/info_security_2024-05.html
- https://www.toshibatec.com/information/20240531_02.html
- https://www.toshibatec.co.jp/information/20240531_02.html
- https://jvn.jp/en/vu/JVNVU93051062/
- https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html
- http://seclists.org/fulldisclosure/2024/Jul/0