CVE-2024-29978

CVSS v3 5.9 MEDIUM

5.9^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

U

ser passwords are decrypted and stored on memory before any user logged in. Those decrypted passwords can be retrieved from the coredump file. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

References

Link	Resource
https://global.sharp/products/copier/info/info_security_2024-05.html
https://jp.sharp/business/print/information/info_security_2024-05.html
https://jvn.jp/en/vu/JVNVU93051062/
https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html
https://www.toshibatec.co.jp/information/20240531_02.html
https://www.toshibatec.com/information/20240531_02.html
http://seclists.org/fulldisclosure/2024/Jul/0

Configurations

No configuration.

History

04 Nov 2025, 18:16

Type	Values Removed	Values Added
Summary		(es) Las contraseñas de usuario se descifran y se almacenan en la memoria antes de que cualquier usuario inicie sesión. Las contraseñas descifradas se pueden recuperar del archivo de volcado de memoria. En cuanto a los detalles de los nombres de los productos afectados, los números de modelo y las versiones, consulte la información proporcionada por los respectivos proveedores que se enumeran en [Referencias].
References		() http://seclists.org/fulldisclosure/2024/Jul/0 -

26 Nov 2024, 08:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-11-26 08:15

Updated : 2025-11-04 18:16

NVD link : CVE-2024-29978

Mitre link : CVE-2024-29978

CVE.ORG link : CVE-2024-29978

JSON object : View

Products Affected

No product.

CWE

CWE-256

Plaintext Storage of a Password

{"id": "CVE-2024-29978", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.2}]}, "published": "2024-11-26T08:15:05.353", "references": [{"url": "https://global.sharp/products/copier/info/info_security_2024-05.html", "source": "[email protected]"}, {"url": "https://jp.sharp/business/print/information/info_security_2024-05.html", "source": "[email protected]"}, {"url": "https://jvn.jp/en/vu/JVNVU93051062/", "source": "[email protected]"}, {"url": "https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html", "source": "[email protected]"}, {"url": "https://www.toshibatec.co.jp/information/20240531_02.html", "source": "[email protected]"}, {"url": "https://www.toshibatec.com/information/20240531_02.html", "source": "[email protected]"}, {"url": "http://seclists.org/fulldisclosure/2024/Jul/0", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-256"}]}], "descriptions": [{"lang": "en", "value": "User passwords are decrypted and stored on memory before any user logged in. Those decrypted passwords can be retrieved from the coredump file. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References]."}, {"lang": "es", "value": "Las contrase\u00f1as de usuario se descifran y se almacenan en la memoria antes de que cualquier usuario inicie sesi\u00f3n. Las contrase\u00f1as descifradas se pueden recuperar del archivo de volcado de memoria. En cuanto a los detalles de los nombres de los productos afectados, los n\u00fameros de modelo y las versiones, consulte la informaci\u00f3n proporcionada por los respectivos proveedores que se enumeran en [Referencias]."}], "lastModified": "2025-11-04T18:16:18.600", "sourceIdentifier": "[email protected]"}