{"api_version":"1","generated_at":"2026-11-04T09:48:04+00:00","cve":"CVE-2024-33605","urls":{"html":"https://cve.report/CVE-2024-33605","api":"https://cve.report/api/cve/CVE-2024-33605.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2024-33605","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2024-33605"},"summary":{"title":"CVE-2024-33605","description":"Improper processing of some parameters of installed_emanual_list.html and installed_emanual_down.html leads to a path traversal vulnerability. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].","state":"PUBLISHED","assigner":"jpcert","published_at":"2024-11-26 08:15:05","updated_at":"2026-11-04 07:17:10"},"problem_types":["CWE-22","CWE-22 Improper limitation of a pathname to a restricted directory ('Path Traversal')"],"metrics":[{"version":"3.1","source":"vultures@jpcert.or.jp","type":"Secondary","score":"7.5","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"7.5","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","data":{"baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"}}],"references":[{"url":"http://seclists.org/fulldisclosure/2024/Jul/0","name":"http://seclists.org/fulldisclosure/2024/Jul/0","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.toshibatec.co.jp/information/20240531_02.html","name":"https://www.toshibatec.co.jp/information/20240531_02.html","refsource":"vultures@jpcert.or.jp","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.toshibatec.com/information/20240531_02.html","name":"https://www.toshibatec.com/information/20240531_02.html","refsource":"vultures@jpcert.or.jp","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://jp.sharp/business/print/information/info_security_2024-05.html","name":"https://jp.sharp/business/print/information/info_security_2024-05.html","refsource":"vultures@jpcert.or.jp","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://jvn.jp/en/vu/JVNVU93051062/","name":"https://jvn.jp/en/vu/JVNVU93051062/","refsource":"vultures@jpcert.or.jp","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html","name":"https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html","refsource":"vultures@jpcert.or.jp","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://global.sharp/products/copier/info/info_security_2024-05.html","name":"https://global.sharp/products/copier/info/info_security_2024-05.html","refsource":"vultures@jpcert.or.jp","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-33605","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-33605","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Sharp Corporation","product":"Multiple MFPs (multifunction printers)","version":"affected See the information provided by Sharp Corporation listed under [References]","platforms":[]},{"source":"CNA","vendor":"Toshiba Tec Corporation","product":"Multiple MFPs (multifunction printers)","version":"affected See the information provided by Toshiba Tec Corporation listed under [References]","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2024-33605","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-12-09T22:10:08.649799Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2024-12-10T15:43:57.213Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"},{"providerMetadata":{"dateUpdated":"2025-11-04T17:20:21.774Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"url":"http://seclists.org/fulldisclosure/2024/Jul/0"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"Multiple MFPs (multifunction printers)","vendor":"Sharp Corporation","versions":[{"status":"affected","version":"See the information provided by Sharp Corporation listed under [References]"}]},{"product":"Multiple MFPs (multifunction printers)","vendor":"Toshiba Tec Corporation","versions":[{"status":"affected","version":"See the information provided by Toshiba Tec Corporation listed under [References]"}]}],"descriptions":[{"lang":"en","value":"Improper processing of some parameters of installed_emanual_list.html and installed_emanual_down.html leads to a path traversal vulnerability. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References]."}],"metrics":[{"cvssV3_1":{"baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-22","description":"Improper limitation of a pathname to a restricted directory ('Path Traversal')","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-11-04T06:20:17.557Z","orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","shortName":"jpcert"},"references":[{"url":"https://global.sharp/products/copier/info/info_security_2024-05.html"},{"url":"https://jp.sharp/business/print/information/info_security_2024-05.html"},{"url":"https://www.toshibatec.com/information/20240531_02.html"},{"url":"https://www.toshibatec.co.jp/information/20240531_02.html"},{"url":"https://jvn.jp/en/vu/JVNVU93051062/"},{"url":"https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html"}]}},"cveMetadata":{"assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","assignerShortName":"jpcert","cveId":"CVE-2024-33605","datePublished":"2024-11-26T07:37:38.329Z","dateReserved":"2024-05-22T09:00:15.651Z","dateUpdated":"2026-11-04T06:20:17.557Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2024-11-26 08:15:05","lastModifiedDate":"2026-11-04 07:17:10","problem_types":["CWE-22","CWE-22 Improper limitation of a pathname to a restricted directory ('Path Traversal')"],"metrics":{"cvssMetricV31":[{"source":"vultures@jpcert.or.jp","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-12-09T22:10:08.649799Z","id":"CVE-2024-33605","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2024","CveId":"33605","Ordinal":"1","Title":"CVE-2024-33605","CVE":"CVE-2024-33605","Year":"2024"},"notes":[{"CveYear":"2024","CveId":"33605","Ordinal":"1","NoteData":"Improper processing of some parameters of installed_emanual_list.html and installed_emanual_down.html leads to a path traversal vulnerability. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].","Type":"Description","Title":"CVE-2024-33605"}]}}}