CVE-2024-36254 - Vulnerability Details

Description

Out-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple MFPs (multifunction printers), which may lead to a denial-of-service (DoS) condition.

Published: 2024-11-26

Score: 7.5 High

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

No analysis available yet.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Sharp Corporation

Multiple MFPs (multifunction printers)

affected

Version	Status	Constraints
`See the information provided by Sharp Corporation listed under [References]`	affected	—

Toshiba Tec Corporation

Multiple MFPs (multifunction printers)

affected

Version	Status	Constraints
`See the information provided by Toshiba Tec Corporation listed under [References]`	affected	—

No data.

No data available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
EUVD	EUVD-2024-36336	Out-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple MFPs (multifunction printers), which may lead to a denial-of-service (DoS) condition.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00159.

Exploitation none

Automatable yes

Technical Impact partial

References

Link	Providers
https://global.sharp/products/copier/info/info_security_2024-05.html
https://jp.sharp/business/print/information/info_security_2024-05.html
https://jvn.jp/en/vu/JVNVU93051062/
https://www.toshibatec.co.jp/information/20240531_02.html
https://www.toshibatec.com/information/20240531_02.html

History

Sat, 12 Jul 2025 13:45:00 +0000

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.00187}`	epss `{'score': 0.00075}`

Tue, 26 Nov 2024 15:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Sharp Sharp bp-30c25 Sharp bp-30c25t Sharp bp-30c25y Sharp bp-30c25z Sharp bp-50c26 Sharp bp-50c31 Sharp bp-50c36 Sharp bp-50c45 Sharp bp-50c55 Sharp bp-50c65 Sharp bp-55c26 Sharp bp-60c31 Sharp bp-60c36 Sharp bp-60c45 Sharp bp-70c31 Sharp bp-70c36 Sharp bp-70c45 Sharp bp-70c55 Sharp bp-70c65 Sharp bp-90c70 Sharp bp-90c80 Sharp mx-2651 Sharp mx-3051 Sharp mx-3061 Sharp mx-3061s Sharp mx-3071 Sharp mx-3071s Sharp mx-3551 Sharp mx-3561 Sharp mx-3561s Sharp mx-3571 Sharp mx-3571s Sharp mx-4051 Sharp mx-4061 Sharp mx-4061s Sharp mx-4071 Sharp mx-4071s Sharp mx-5051 Sharp mx-5071 Sharp mx-5071s Sharp mx-6051 Sharp mx-6071 Sharp mx-6071s Sharp mx-6580n Sharp mx-7081 Sharp mx-7090n Sharp mx-7580n Sharp mx-8081 Sharp mx-8090n
CPEs		cpe:2.3:h:sharp:bp-30c25:-:::::::* cpe:2.3:h:sharp:bp-30c25t:-:::::::* cpe:2.3:h:sharp:bp-30c25y:-:::::::* cpe:2.3:h:sharp:bp-30c25z:-:::::::* cpe:2.3:h:sharp:bp-50c26:-:::::::* cpe:2.3:h:sharp:bp-50c31:-:::::::* cpe:2.3:h:sharp:bp-50c36:-:::::::* cpe:2.3:h:sharp:bp-50c45:-:::::::* cpe:2.3:h:sharp:bp-50c55:-:::::::* cpe:2.3:h:sharp:bp-50c65:-:::::::* cpe:2.3:h:sharp:bp-55c26:-:::::::* cpe:2.3:h:sharp:bp-60c31:-:::::::* cpe:2.3:h:sharp:bp-60c36:-:::::::* cpe:2.3:h:sharp:bp-60c45:-:::::::* cpe:2.3:h:sharp:bp-70c31:-:::::::* cpe:2.3:h:sharp:bp-70c36:-:::::::* cpe:2.3:h:sharp:bp-70c45:-:::::::* cpe:2.3:h:sharp:bp-70c55:-:::::::* cpe:2.3:h:sharp:bp-70c65:-:::::::* cpe:2.3:h:sharp:bp-90c70:-:::::::* cpe:2.3:h:sharp:bp-90c80:-:::::::* cpe:2.3:h:sharp:mx-2651:-:::::::* cpe:2.3:h:sharp:mx-3051:-:::::::* cpe:2.3:h:sharp:mx-3061:-:::::::* cpe:2.3:h:sharp:mx-3061s:-:::::::* cpe:2.3:h:sharp:mx-3071:-:::::::* cpe:2.3:h:sharp:mx-3071s:-:::::::* cpe:2.3:h:sharp:mx-3551:-:::::::* cpe:2.3:h:sharp:mx-3561:-:::::::* cpe:2.3:h:sharp:mx-3561s:-:::::::* cpe:2.3:h:sharp:mx-3571:-:::::::* cpe:2.3:h:sharp:mx-3571s:-:::::::* cpe:2.3:h:sharp:mx-4051:-:::::::* cpe:2.3:h:sharp:mx-4061:-:::::::* cpe:2.3:h:sharp:mx-4061s:-:::::::* cpe:2.3:h:sharp:mx-4071:-:::::::* cpe:2.3:h:sharp:mx-4071s:-:::::::* cpe:2.3:h:sharp:mx-5051:-:::::::* cpe:2.3:h:sharp:mx-5071:-:::::::* cpe:2.3:h:sharp:mx-5071s:-:::::::* cpe:2.3:h:sharp:mx-6051:-:::::::* cpe:2.3:h:sharp:mx-6071:-:::::::* cpe:2.3:h:sharp:mx-6071s:-:::::::* cpe:2.3:h:sharp:mx-6580n:-:::::::* cpe:2.3:h:sharp:mx-7081:-:::::::* cpe:2.3:h:sharp:mx-7090n:-:::::::* cpe:2.3:h:sharp:mx-7580n:-:::::::* cpe:2.3:h:sharp:mx-8081:-:::::::* cpe:2.3:h:sharp:mx-8090n:-:::::::*
Vendors & Products		Sharp Sharp bp-30c25 Sharp bp-30c25t Sharp bp-30c25y Sharp bp-30c25z Sharp bp-50c26 Sharp bp-50c31 Sharp bp-50c36 Sharp bp-50c45 Sharp bp-50c55 Sharp bp-50c65 Sharp bp-55c26 Sharp bp-60c31 Sharp bp-60c36 Sharp bp-60c45 Sharp bp-70c31 Sharp bp-70c36 Sharp bp-70c45 Sharp bp-70c55 Sharp bp-70c65 Sharp bp-90c70 Sharp bp-90c80 Sharp mx-2651 Sharp mx-3051 Sharp mx-3061 Sharp mx-3061s Sharp mx-3071 Sharp mx-3071s Sharp mx-3551 Sharp mx-3561 Sharp mx-3561s Sharp mx-3571 Sharp mx-3571s Sharp mx-4051 Sharp mx-4061 Sharp mx-4061s Sharp mx-4071 Sharp mx-4071s Sharp mx-5051 Sharp mx-5071 Sharp mx-5071s Sharp mx-6051 Sharp mx-6071 Sharp mx-6071s Sharp mx-6580n Sharp mx-7081 Sharp mx-7090n Sharp mx-7580n Sharp mx-8081 Sharp mx-8090n
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 26 Nov 2024 07:45:00 +0000

Type	Values Removed	Values Added
Description		Out-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple MFPs (multifunction printers), which may lead to a denial-of-service (DoS) condition.
Weaknesses		CWE-125
References		https://global.sharp/products/copier/info/info_security_2024-05.html https://jp.sharp/business/print/information/info_security_2024-05.html https://jvn.jp/en/vu/JVNVU93051062/ https://www.toshibatec.co.jp/information/20240531_02.html https://www.toshibatec.com/information/20240531_02.html
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}`

Subscriptions

Sharp Bp-30c25 Bp-30c25t Bp-30c25y Bp-30c25z Bp-50c26 Bp-50c31 Bp-50c36 Bp-50c45 Bp-50c55 Bp-50c65 Bp-55c26 Bp-60c31 Bp-60c36 Bp-60c45 Bp-70c31 Bp-70c36 Bp-70c45 Bp-70c55 Bp-70c65 Bp-90c70 Bp-90c80 Mx-2651 Mx-3051 Mx-3061 Mx-3061s Mx-3071 Mx-3071s Mx-3551 Mx-3561 Mx-3561s Mx-3571 Mx-3571s Mx-4051 Mx-4061 Mx-4061s Mx-4071 Mx-4071s Mx-5051 Mx-5071 Mx-5071s Mx-6051 Mx-6071 Mx-6071s Mx-6580n Mx-7081 Mx-7090n Mx-7580n Mx-8081 Mx-8090n

MITRE

Status: PUBLISHED

Assigner: jpcert

Published: 2024-11-26T07:38:30.408Z

Updated: 2024-11-26T14:48:35.480Z

Reserved: 2024-05-22T09:00:17.089Z

Link: CVE-2024-36254

Vulnrichment

Updated: 2024-11-26T14:48:13.624Z

NVD

Status : Received

Published: 2024-11-26T08:15:06.923

Modified: 2024-11-26T08:15:06.923

Link: CVE-2024-36254

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-125

Tracking

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation none

Automatable yes

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object