CVE-2024-42420highCWE-125

CVE-2024-42420: high-severity vulnerability in Sharp Digital Full-color MFPs and Monochrome…

Published

Follow this CVE+ Monitor Sharp Digital Full-color MFPs and Monochrome MFPs+ Monitor e-STUDIO

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 0.8%
Sharp and Toshiba Tec MFPs contain multiple Out-of-bounds Read vulnerabilities, due to improper processing of keyword search input and improper processing of SOAP messages. Crafted HTTP requests may cause affected products crashed.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Sharp Corporation · Sharp Digital Full-color MFPs and Monochrome MFPsToshiba Tec Corporation · e-STUDIO 1058Toshiba Tec Corporation · e-STUDIO 1208Toshiba Tec Corporation · e-STUDIO 908
Related CVEs — Sharp Digital Full-color MFPs and Monochrome…

In the same product, most dangerous first.

CVE-2024-43424HIGHCVE-2024-43424EPSS 0.8%CVE-2024-45829MEDIUMCVE-2024-45829EPSS 0.7%CVE-2024-47406CRITICALCVE-2024-47406EPSS 0.6%CVE-2024-45842MEDIUMCVE-2024-45842EPSS 0.6%CVE-2024-47005HIGHCVE-2024-47005EPSS 0.5%CVE-2024-47801HIGHCVE-2024-47801EPSS 0.4%