CVE-2024-36251

Published Nov 26, 2024 CVSS 3.1 · 7.5 High EPSS 3.5% KEV · Not listed

Description

The web interface of the affected devices process some crafted HTTP requests improperly, leading to a device crash. More precisely, a crafted parameter to billcodedef_sub_sel.html is not processed properly and device-crash happens. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Sharp Corporation

Multiple MFPs (multifunction printers)

affected

Version	Status	Constraints
`See the information provided by Sharp Corporation listed under [References]`	affected	—

Toshiba Tec Corporation

Multiple MFPs (multifunction printers)

affected

Version	Status	Constraints
`See the information provided by Toshiba Tec Corporation listed under [References]`	affected	—

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

Source	ID	Title
EUVD	EUVD-2024-36335	The web interface of the affected devices process some crafted HTTP requests improperly, leading to a device crash. More precisely, a crafted parameter to billcodedef_sub_sel.html is not processed properly and device-crash happens. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: 3.5% (3.498% probability within 30 days)

Exploitation poc

Automatable yes

Technical Impact partial

References

Link	Providers
http://seclists.org/fulldisclosure/2024/Jul/0
https://global.sharp/products/copier/info/info_security_2024-05.html
https://jp.sharp/business/print/information/info_security_2024-05.html
https://jvn.jp/en/vu/JVNVU93051062/
https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html
https://www.toshibatec.co.jp/information/20240531_02.html
https://www.toshibatec.com/information/20240531_02.html

History

Nov 4, 2025 6:30 PM Added references View changes

Type	Values Removed	Values Added
References		http://seclists.org/fulldisclosure/2024/Jul/0

Jul 12, 2025 1:45 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.00471}`	epss `{'score': 0.00194}`

Nov 26, 2024 5:15 PM First appearance in the feed. Affected versions updated. Affected vendors updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
First Time appeared		Sharp Sharp bp-b537wr Sharp bp-b540wr Sharp bp-b547wd Sharp bp-b550wd Sharp mx-b355w Sharp mx-b355wt Sharp mx-b355wz Sharp mx-b455w Sharp mx-b455wt Sharp mx-b455wz Sharp mx-m2630 Sharp mx-m3050 Sharp mx-m3070 Sharp mx-m3550 Sharp mx-m3570 Sharp mx-m4050 Sharp mx-m4070 Sharp mx-m5050 Sharp mx-m5070 Sharp mx-m6050 Sharp mx-m6070 Sharp mx-m905
CPEs		cpe:2.3:h:sharp:bp-b537wr:-:::::::* cpe:2.3:h:sharp:bp-b540wr:-:::::::* cpe:2.3:h:sharp:bp-b547wd:-:::::::* cpe:2.3:h:sharp:bp-b550wd:-:::::::* cpe:2.3:h:sharp:mx-b355w:-:::::::* cpe:2.3:h:sharp:mx-b355wt:-:::::::* cpe:2.3:h:sharp:mx-b355wz:-:::::::* cpe:2.3:h:sharp:mx-b455w:-:::::::* cpe:2.3:h:sharp:mx-b455wt:-:::::::* cpe:2.3:h:sharp:mx-b455wz:-:::::::* cpe:2.3:h:sharp:mx-m2630:-:::::::* cpe:2.3:h:sharp:mx-m3050:-:::::::* cpe:2.3:h:sharp:mx-m3070:-:::::::* cpe:2.3:h:sharp:mx-m3550:-:::::::* cpe:2.3:h:sharp:mx-m3570:-:::::::* cpe:2.3:h:sharp:mx-m4050:-:::::::* cpe:2.3:h:sharp:mx-m4070:-:::::::* cpe:2.3:h:sharp:mx-m5050:-:::::::* cpe:2.3:h:sharp:mx-m5070:-:::::::* cpe:2.3:h:sharp:mx-m6050:-:::::::* cpe:2.3:h:sharp:mx-m6070:-:::::::* cpe:2.3:h:sharp:mx-m905:-:::::::*
Vendors & Products		Sharp Sharp bp-b537wr Sharp bp-b540wr Sharp bp-b547wd Sharp bp-b550wd Sharp mx-b355w Sharp mx-b355wt Sharp mx-b355wz Sharp mx-b455w Sharp mx-b455wt Sharp mx-b455wz Sharp mx-m2630 Sharp mx-m3050 Sharp mx-m3070 Sharp mx-m3550 Sharp mx-m3570 Sharp mx-m4050 Sharp mx-m4070 Sharp mx-m5050 Sharp mx-m5070 Sharp mx-m6050 Sharp mx-m6070 Sharp mx-m905
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Nov 26, 2024 7:45 AM Description updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		The web interface of the affected devices process some crafted HTTP requests improperly, leading to a device crash. More precisely, a crafted parameter to billcodedef_sub_sel.html is not processed properly and device-crash happens. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
Weaknesses		CWE-125
References		https://global.sharp/products/copier/info/info_security_2024-05.html https://jp.sharp/business/print/information/info_security_2024-05.html https://jvn.jp/en/vu/JVNVU93051062/ https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html https://www.toshibatec.co.jp/information/20240531_02.html https://www.toshibatec.com/information/20240531_02.html
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}`

Subscriptions

Sharp Bp-b537wr Bp-b540wr Bp-b547wd Bp-b550wd Mx-b355w Mx-b355wt Mx-b355wz Mx-b455w Mx-b455wt Mx-b455wz Mx-m2630 Mx-m3050 Mx-m3070 Mx-m3550 Mx-m3570 Mx-m4050 Mx-m4070 Mx-m5050 Mx-m5070 Mx-m6050 Mx-m6070 Mx-m905

Weaknesses