Sharp MFPs Experience Out-of-bounds Read Vulnerability

CVE-2024-45829
7.5HIGH

Key Information

Vendor
Sharp Corporation
Status
Sharp Digital Full-color Mfps And Monochrome Mfps
E-studio 908
E-studio 1058
E-studio 1208
Vendor
CVE Published:
25 October 2024

Summary

Sharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are improperly processed and resulting in an Out-of-bounds Read vulnerability. Crafted HTTP requests may cause affected products crashed.

Affected Version(s)

Sharp Digital Full-color MFPs and Monochrome MFPs = see the information provided by Sharp Corporation

e-STUDIO 908 = T2.12.h3.00 and earlier versions

e-STUDIO 1058 = T1.01.h4.00 and earlier versions

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published.

  • Vulnerability Reserved.

Collectors

NVD DatabaseMitre Database
.