Project Subscriptions
No advisories yet.
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
No reference.
Sat, 07 Nov 2026 07:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Sharp Multifunction Printers Local File Inclusion via installed_emanual_down.html | |
| Metrics |
ssvc
|
Fri, 06 Nov 2026 19:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-22 | |
| References |
|
|
| Metrics |
cvssV3_1
|
Fri, 06 Nov 2026 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Sharp (and Toshiba Tec rebranded) multifunction printers contain an unauthenticated local file inclusion vulnerability that allows remote attackers to read arbitrary files by manipulating the path parameter in the installed_emanual_down.html endpoint. Attackers can supply directory traversal sequences such as path=/manual/../../../<path> to access files outside the intended manual directory, including /etc/passwd, coredump files containing credentials, and system configuration files. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-07-30. | This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2024-33605's description was updated to include the impacted endpoint as singular patch addressed both. |
| Metrics |
cvssV4_0
|
cvssV4_0
|
Tue, 06 Oct 2026 02:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Thu, 01 Oct 2026 20:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Sharp Corporation
Sharp Corporation multiple Multifunction Printers Toshiba Tec Corporation Toshiba Tec Corporation multiple Multifunction Printers |
|
| Vendors & Products |
Sharp Corporation
Sharp Corporation multiple Multifunction Printers Toshiba Tec Corporation Toshiba Tec Corporation multiple Multifunction Printers |
Thu, 01 Oct 2026 14:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Sharp (and Toshiba Tec rebranded) multifunction printers contain an unauthenticated local file inclusion vulnerability that allows remote attackers to read arbitrary files by manipulating the path parameter in the installed_emanual_down.html endpoint. Attackers can supply directory traversal sequences such as path=/manual/../../../<path> to access files outside the intended manual directory, including /etc/passwd, coredump files containing credentials, and system configuration files. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-07-30. | |
| Title | Sharp Multifunction Printers Local File Inclusion via installed_emanual_down.html | |
| Weaknesses | CWE-22 | |
| References |
|
|
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
Status: REJECTED
Assigner: VulnCheck
Published:
Updated: 2026-11-06T18:02:46.319Z
Reserved: 2026-10-01T13:07:16.912Z
Link: CVE-2024-58388
Updated:
Status : Rejected
Published: 2026-10-01T15:17:17.347
Modified: 2026-11-09T10:10:00.217
Link: CVE-2024-58388
No data.
OpenCVE Enrichment
Updated: 2026-10-01T19:34:18Z
No weakness.