CVE-2024-33616

{"id": "CVE-2024-33616", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2024-11-26T08:15:05.987", "references": [{"url": "https://global.sharp/products/copier/info/info_security_2024-05.html", "source": "[email protected]"}, {"url": "https://jp.sharp/business/print/information/info_security_2024-05.html", "source": "[email protected]"}, {"url": "https://jvn.jp/en/vu/JVNVU93051062/", "source": "[email protected]"}, {"url": "https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html", "source": "[email protected]"}, {"url": "https://www.toshibatec.co.jp/information/20240531_02.html", "source": "[email protected]"}, {"url": "https://www.toshibatec.com/information/20240531_02.html", "source": "[email protected]"}, {"url": "http://seclists.org/fulldisclosure/2024/Jul/0", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-306"}]}], "descriptions": [{"lang": "en", "value": "Admin authentication can be bypassed with some specific invalid credentials, which allows logging in with an administrative privilege. Sharp Corporation states the telnet feature is implemented on older models only, and is planning to provide the firmware update to remove the feature. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References]."}, {"lang": "es", "value": "La autenticaci\u00f3n de administrador se puede omitir con algunas credenciales no v\u00e1lidas espec\u00edficas, lo que permite iniciar sesi\u00f3n con privilegios administrativos. Sharp Corporation afirma que la funci\u00f3n Telnet est\u00e1 implementada solo en modelos m\u00e1s antiguos y planea proporcionar la actualizaci\u00f3n de firmware para eliminar la funci\u00f3n. En cuanto a los detalles de los nombres de los productos afectados, los n\u00fameros de modelo y las versiones, consulte la informaci\u00f3n proporcionada por los respectivos proveedores que se enumeran en [Referencias]."}], "lastModified": "2025-11-04T18:16:20.837", "sourceIdentifier": "[email protected]"}