CVE-2024-32151

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2024-32151", "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "state": "PUBLISHED", "assignerShortName": "jpcert", "dateReserved": "2024-05-22T09:00:11.984Z", "datePublished": "2024-11-26T07:37:32.412Z", "dateUpdated": "2025-11-04T17:20:16.273Z"}, "containers": {"cna": {"affected": [{"vendor": "Sharp Corporation", "product": "Multiple MFPs (multifunction printers)", "versions": [{"version": "See the information provided by Sharp Corporation listed under [References]", "status": "affected"}]}, {"vendor": "Toshiba Tec Corporation", "product": "Multiple MFPs (multifunction printers)", "versions": [{"version": "See the information provided by Toshiba Tec Corporation listed under [References]", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "User passwords are decrypted and stored on memory before any user logged in. Those decrypted passwords can be retrieved from the coredump file. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References]."}], "problemTypes": [{"descriptions": [{"description": "Storing passwords in a recoverable format", "lang": "en-US", "cweId": "CWE-257", "type": "CWE"}]}], "references": [{"url": "https://global.sharp/products/copier/info/info_security_2024-05.html"}, {"url": "https://jp.sharp/business/print/information/info_security_2024-05.html"}, {"url": "https://www.toshibatec.com/information/20240531_02.html"}, {"url": "https://www.toshibatec.co.jp/information/20240531_02.html"}, {"url": "https://jvn.jp/en/vu/JVNVU93051062/"}, {"url": "https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "baseSeverity": "MEDIUM", "baseScore": 5.9, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"}}], "providerMetadata": {"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert", "dateUpdated": "2024-11-26T10:57:58.852Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-32151", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-11-26T14:03:23.265630Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-26T14:09:24.628Z"}}, {"title": "CVE Program Container", "references": [{"url": "http://seclists.org/fulldisclosure/2024/Jul/0"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-11-04T17:20:16.273Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "http://seclists.org/fulldisclosure/2024/Jul/0"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-11-04T17:20:16.273Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-32151", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-11-26T14:03:23.265630Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-26T14:03:25.527Z"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"}, "scenarios": [{"lang": "en-US", "value": "GENERAL"}]}], "affected": [{"vendor": "Sharp Corporation", "product": "Multiple MFPs (multifunction printers)", "versions": [{"status": "affected", "version": "See the information provided by Sharp Corporation listed under [References]"}]}, {"vendor": "Toshiba Tec Corporation", "product": "Multiple MFPs (multifunction printers)", "versions": [{"status": "affected", "version": "See the information provided by Toshiba Tec Corporation listed under [References]"}]}], "references": [{"url": "https://global.sharp/products/copier/info/info_security_2024-05.html"}, {"url": "https://jp.sharp/business/print/information/info_security_2024-05.html"}, {"url": "https://www.toshibatec.com/information/20240531_02.html"}, {"url": "https://www.toshibatec.co.jp/information/20240531_02.html"}, {"url": "https://jvn.jp/en/vu/JVNVU93051062/"}, {"url": "https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html"}], "descriptions": [{"lang": "en", "value": "User passwords are decrypted and stored on memory before any user logged in. Those decrypted passwords can be retrieved from the coredump file. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References]."}], "problemTypes": [{"descriptions": [{"lang": "en-US", "type": "CWE", "cweId": "CWE-257", "description": "Storing passwords in a recoverable format"}]}], "providerMetadata": {"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert", "dateUpdated": "2024-11-26T10:57:58.852Z"}}}, "cveMetadata": {"cveId": "CVE-2024-32151", "state": "PUBLISHED", "dateUpdated": "2025-11-04T17:20:16.273Z", "dateReserved": "2024-05-22T09:00:11.984Z", "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "datePublished": "2024-11-26T07:37:32.412Z", "assignerShortName": "jpcert"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "Multiple MFPs (multifunction printers)", "vendor": "Sharp Corporation", "versions": [{"status": "affected", "version": "See the information provided by Sharp Corporation listed under [References]"}]}, {"product": "Multiple MFPs (multifunction printers)", "vendor": "Toshiba Tec Corporation", "versions": [{"status": "affected", "version": "See the information provided by Toshiba Tec Corporation listed under [References]"}]}], "source": "vultures@jpcert.or.jp"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "User passwords are decrypted and stored on memory before any user logged in. Those decrypted passwords can be retrieved from the coredump file. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References]."}, {"lang": "es", "value": "Las contrase\u00f1as de usuario se descifran y se almacenan en la memoria antes de que cualquier usuario inicie sesi\u00f3n. Las contrase\u00f1as descifradas se pueden recuperar del archivo de volcado de memoria. En cuanto a los detalles de los nombres de los productos afectados, los n\u00fameros de modelo y las versiones, consulte la informaci\u00f3n proporcionada por los respectivos proveedores que se enumeran en [Referencias]."}], "id": "CVE-2024-32151", "lastModified": "2026-06-17T07:29:22.357", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 3.6, "source": "vultures@jpcert.or.jp", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-32151", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2024-11-26T14:03:23.265630Z", "version": "2.0.3"}}]}, "published": "2024-11-26T08:15:05.513", "references": [{"source": "vultures@jpcert.or.jp", "url": "https://global.sharp/products/copier/info/info_security_2024-05.html"}, {"source": "vultures@jpcert.or.jp", "url": "https://jp.sharp/business/print/information/info_security_2024-05.html"}, {"source": "vultures@jpcert.or.jp", "url": "https://jvn.jp/en/vu/JVNVU93051062/"}, {"source": "vultures@jpcert.or.jp", "url": "https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html"}, {"source": "vultures@jpcert.or.jp", "url": "https://www.toshibatec.co.jp/information/20240531_02.html"}, {"source": "vultures@jpcert.or.jp", "url": "https://www.toshibatec.com/information/20240531_02.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://seclists.org/fulldisclosure/2024/Jul/0"}], "sourceIdentifier": "vultures@jpcert.or.jp", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-257"}], "source": "vultures@jpcert.or.jp", "type": "Secondary"}]}

{}

{}