fkie_cve-2024-33610
Vulnerability from fkie_nvd
Published
2024-11-26 08:15
Modified
2024-11-26 08:15
Severity ?
Summary
"sessionlist.html" and "sys_trayentryreboot.html" are accessible with no authentication. "sessionlist.html" provides logged-in users' session information including session cookies, and "sys_trayentryreboot.html" allows to reboot the device. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
References
Impacted products
| Vendor | Product | Version |
|---|
{
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "\"sessionlist.html\" and \"sys_trayentryreboot.html\" are accessible with no authentication. \"sessionlist.html\" provides logged-in users\u0027 session information including session cookies, and \"sys_trayentryreboot.html\" allows to reboot the device. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References]."
},
{
"lang": "es",
"value": "\"sessionlist.html\" y \"sys_trayentryreboot.html\" son accesibles sin autenticaci\u00f3n. \"sessionlist.html\" proporciona informaci\u00f3n de la sesi\u00f3n de los usuarios que han iniciado sesi\u00f3n, incluidas las cookies de sesi\u00f3n, y \"sys_trayentryreboot.html\" permite reiniciar el dispositivo. En cuanto a los detalles de los nombres de los productos afectados, los n\u00fameros de modelo y las versiones, consulte la informaci\u00f3n proporcionada por los respectivos proveedores que se enumeran en [Referencias]."
}
],
"id": "CVE-2024-33610",
"lastModified": "2024-11-26T08:15:05.810",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 5.2,
"source": "vultures@jpcert.or.jp",
"type": "Secondary"
}
]
},
"published": "2024-11-26T08:15:05.810",
"references": [
{
"source": "vultures@jpcert.or.jp",
"url": "https://global.sharp/products/copier/info/info_security_2024-05.html"
},
{
"source": "vultures@jpcert.or.jp",
"url": "https://jp.sharp/business/print/information/info_security_2024-05.html"
},
{
"source": "vultures@jpcert.or.jp",
"url": "https://jvn.jp/en/vu/JVNVU93051062/"
},
{
"source": "vultures@jpcert.or.jp",
"url": "https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html"
},
{
"source": "vultures@jpcert.or.jp",
"url": "https://www.toshibatec.co.jp/information/20240531_02.html"
},
{
"source": "vultures@jpcert.or.jp",
"url": "https://www.toshibatec.com/information/20240531_02.html"
}
],
"sourceIdentifier": "vultures@jpcert.or.jp",
"vulnStatus": "Awaiting Analysis",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-288"
}
],
"source": "vultures@jpcert.or.jp",
"type": "Primary"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.