CVE-2024-28955

MEDIUM

Affected Devices - Info Disclosure

Title source: llm

Description

Affected devices create coredump files when crashed, storing them with world-readable permission. Any local user of the device can examine the coredump files, and research the memory contents. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

Exploits (1)

github WORKING POC 34 stars

by Stuub · pythonpoc

https://github.com/Stuub/CVE-2024-28995

View Code ZIP pw:eip

References (7)

[Various Sources] https://www.toshibatec.com/information/20240531_02.html

[Various Sources] https://global.sharp/products/copier/info/info_security_2024-05.html

[Various Sources] https://jp.sharp/business/print/information/info_security_2024-05.html

[Third Party Advisory] https://jvn.jp/en/vu/JVNVU93051062/

[Various Sources] https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html

[Various Sources] https://www.toshibatec.co.jp/information/20240531_02.html

[Mailing List] http://seclists.org/fulldisclosure/2024/Jul/0

Scores

CVSS v3 5.9

EPSS 0.0061

EPSS Percentile 69.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-732

Status published

Products (2)

Sharp Corporation/Multiple MFPs (multifunction printers) See the information provided by Sharp Corporation listed under [References]

Toshiba Tec Corporation/Multiple MFPs (multifunction printers) See the information provided by Toshiba Tec Corporation listed under [References]

Published Nov 26, 2024

Tracked Since Feb 18, 2026