CVE-2024-33610

CRITICAL NUCLEI

Unauthenticated Access - Info Disclosure

Title source: llm

Description

"sessionlist.html" and "sys_trayentryreboot.html" are accessible with no authentication. "sessionlist.html" provides logged-in users' session information including session cookies, and "sys_trayentryreboot.html" allows to reboot the device. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

Nuclei Templates (1)

Sharp Multifunction Printers - Cookie Exposure
MEDIUMVERIFIEDby gy741
Shodan: Set-Cookie: MFPSESSIONID=

References (7)

Scores

CVSS v3 9.1
EPSS 0.6233
EPSS Percentile 98.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Details

CWE
CWE-288
Status published
Products (2)
Sharp Corporation/Multiple MFPs (multifunction printers) See the information provided by Sharp Corporation listed under [References]
Toshiba Tec Corporation/Multiple MFPs (multifunction printers) See the information provided by Toshiba Tec Corporation listed under [References]
Published Nov 26, 2024
Tracked Since Feb 18, 2026