"sessionlist.html" and "sys_trayentryreboot.html" are accessible with no authentication. "sessionlist.html" provides...

9.1 CVSS

Vulnerability Description

"sessionlist.html" and "sys_trayentryreboot.html" are accessible with no authentication. "sessionlist.html" provides logged-in users' session information including session cookies, and "sys_trayentryreboot.html" allows to reboot the device. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-33610

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Sharp Corporation

View All →

CVE-2024-54082

home 5G HR02 and Wi-Fi STATION SH-54C contain an OS...

High 7.2

CVE-2024-52321

Multiple SHARP routers contain an improper authentication vulnerability in the...

Medium 5.9

CVE-2024-47864

home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C...

Medium 5.3

CVE-2024-47801

Sharp and Toshiba Tec MFPs improperly process query parameters in...

High 7.4

CVE-2024-47549

Sharp and Toshiba Tec MFPs improperly process query parameters in...

High 7.4

Affected Vendor

Sharp Corporation

View all reports →

Affected Software

Multiple MFPs (multifunction printers)

Vulnerable Versions:

See the information provided by Sharp Corporation listed under [References], See the information provided by Toshiba Tec Corporation listed under [References]