nvd-json-data-feeds/CVE-2024/CVE-2024-336xx/CVE-2024-33610.json

{
  "id": "CVE-2024-33610",
  "sourceIdentifier": "vultures@jpcert.or.jp",
  "published": "2024-11-26T08:15:05.810",
  "lastModified": "2024-11-26T08:15:05.810",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "\"sessionlist.html\" and \"sys_trayentryreboot.html\" are accessible with no authentication. \"sessionlist.html\" provides logged-in users' session information including session cookies, and \"sys_trayentryreboot.html\" allows to reboot the device. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References]."
    },
    {
      "lang": "es",
      "value": "\"sessionlist.html\" y \"sys_trayentryreboot.html\" son accesibles sin autenticaci\u00f3n. \"sessionlist.html\" proporciona informaci\u00f3n de la sesi\u00f3n de los usuarios que han iniciado sesi\u00f3n, incluidas las cookies de sesi\u00f3n, y \"sys_trayentryreboot.html\" permite reiniciar el dispositivo. En cuanto a los detalles de los nombres de los productos afectados, los n\u00fameros de modelo y las versiones, consulte la informaci\u00f3n proporcionada por los respectivos proveedores que se enumeran en [Referencias]."
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "vultures@jpcert.or.jp",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
          "baseScore": 9.1,
          "baseSeverity": "CRITICAL",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.2
      }
    ]
  },
  "weaknesses": [
    {
      "source": "vultures@jpcert.or.jp",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-288"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://global.sharp/products/copier/info/info_security_2024-05.html",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "https://jp.sharp/business/print/information/info_security_2024-05.html",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "https://jvn.jp/en/vu/JVNVU93051062/",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "https://www.toshibatec.co.jp/information/20240531_02.html",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "https://www.toshibatec.com/information/20240531_02.html",
      "source": "vultures@jpcert.or.jp"
    }
  ]
}