CVE-2024-33605
highImproper processing of some parameters of installed_emanual_list.html and installed_emanual_down.html leads to a path traversal vulnerability.
Improper processing of some parameters of installed_emanual_list.html and installed_emanual_down.html leads to a path traversal vulnerability. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
CVSS
7.5
7.5 (CVSS v3.1)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Severity source: NVD CVSS v3.1 (vultures@jpcert.or.jp)
Timeline (UTC)
Published: 2024-11-26 08:15
Modified: 2026-11-04 07:17
NVD status: Deferred
Last synced 20 hours ago
Verified against the source API 2026-11-04 07:29 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).
Affected products
Not reported by the source (unknown — not "none").
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
No vendor advisory or patch reference tagged by NVD. Check the references below.
References
- https://global.sharp/products/copier/info/info_security_2024-05.html vultures@jpcert.or.jp
- https://jp.sharp/business/print/information/info_security_2024-05.html vultures@jpcert.or.jp
- https://jvn.jp/en/vu/JVNVU93051062/ vultures@jpcert.or.jp
- https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html vultures@jpcert.or.jp
- https://www.toshibatec.co.jp/information/20240531_02.html vultures@jpcert.or.jp
- https://www.toshibatec.com/information/20240531_02.html vultures@jpcert.or.jp
- http://seclists.org/fulldisclosure/2024/Jul/0 af854a3a-2127-422b-91ae-364da2661108
Data sources
NVD CVE API 2.0 — fetched 2026-11-04 07:29 UTC · record ↗