CVE-2024-45842 MEDIUM

CVE-2024-45842

Vendor Sharp Corporation
Product Sharp Digital Full-color MFPs and Monochrome MFPs
Weakness CWE-22 · Path traversal
Published October 25, 2024
Last update December 3, 2024
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

Sharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path Traversal vulnerability. Unintended internal files may be retrieved when processing crafted HTTP requests.

Key dates

02Disclosure timeline

October 25, 2024 CVE published
December 3, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-20529 Cisco Identity Services Engine Arbitrary File Read and Delete Vulnerability CVE-2025-42894 Path Traversal vulnerability in SAP Business Connector CVE-2024-13914 File Manager Advanced Shortcode <= Multiple Versions - Authenticated (Administrator+) Local JavaScript File Inclusion via Shortcode CVE-2026-34451 Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories CVE-2025-7526 WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Authenticated (Subscriber+) Arbitrary File Deletion via File Renaming