CVE-2024-28955
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.9epss 1.3%
exploitation probability
1.3%top 32% of all CVEs
observed exploitation
nono source reports it
Affected devices create coredump files when crashed, storing them with world-readable permission. Any local user of the device can examine the coredump files, and research the memory contents. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Sharp Corporation · Multiple MFPs (multifunction printers)Toshiba Tec Corporation · Multiple MFPs (multifunction printers)References
http://seclists.org/fulldisclosure/2024/Jul/0https://global.sharp/products/copier/info/info_security_2024-05.htmlhttps://jp.sharp/business/print/information/info_security_2024-05.htmlhttps://jvn.jp/en/vu/JVNVU93051062/https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.htmlhttps://www.toshibatec.co.jp/information/20240531_02.htmlhttps://www.toshibatec.com/information/20240531_02.html