« Volver al listado

CVE-2024-33616

Estado: AplazadaMedia (5.3)—

Admin authentication can be bypassed with some specific invalid credentials, which allows logging in with an administrative privilege. Sharp Corporation states the telnet feature is implemented on older models only, and is planning to provide the firmware update to remove the feature. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Sharp — SharpAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-33616",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-33616",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-12-09T22:10:06.870573Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "vultures@jpcert.or.jp",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "vultures@jpcert.or.jp",
      "affectedData": [
        {
          "vendor": "Sharp Corporation",
          "product": "Multiple MFPs (multifunction printers)",
          "versions": [
            {
              "status": "affected",
              "version": "See the information provided by Sharp Corporation listed under [References]"
            }
          ]
        },
        {
          "vendor": "Toshiba Tec Corporation",
          "product": "Multiple MFPs (multifunction printers)",
          "versions": [
            {
              "status": "affected",
              "version": "See the information provided by Toshiba Tec Corporation listed under [References]"
            }
          ]
        }
      ]
    }
  ],
  "published": "2024-11-26T08:15:05.987",
  "references": [
    {
      "url": "https://global.sharp/products/copier/info/info_security_2024-05.html",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "https://jp.sharp/business/print/information/info_security_2024-05.html",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "https://jvn.jp/en/vu/JVNVU93051062/",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "https://www.toshibatec.co.jp/information/20240531_02.html",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "https://www.toshibatec.com/information/20240531_02.html",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2024/Jul/0",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-306"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Admin authentication can be bypassed with some specific invalid credentials, which allows logging in with an administrative privilege. Sharp Corporation states the telnet feature is implemented on older models only, and is planning to provide the firmware update to remove the feature. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References]."
    },
    {
      "lang": "es",
      "value": "La autenticación de administrador se puede omitir con algunas credenciales no válidas específicas, lo que permite iniciar sesión con privilegios administrativos. Sharp Corporation afirma que la función Telnet está implementada solo en modelos más antiguos y planea proporcionar la actualización de firmware para eliminar la función. En cuanto a los detalles de los nombres de los productos afectados, los números de modelo y las versiones, consulte la información proporcionada por los respectivos proveedores que se enumeran en [Referencias]."
    }
  ],
  "lastModified": "2026-06-17T07:32:05.710",
  "sourceIdentifier": "vultures@jpcert.or.jp"
}