Skip to content
CVE PROGRAM SOURCE RECORD9.0 Critical

CVE-2024-28038

The web interface of the affected devices processes a cookie value improperly, leading to a stack buffer overflow. More precisely, giving too long character string to MFPSESSIONID

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jpcert

Description

The web interface of the affected devices processes a cookie value improperly, leading to a stack buffer overflow. More precisely, giving too long character string to MFPSESSIONID parameter results in a stack buffer overflow. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Sharp Corporation Multiple MFPs (multifunction printers)

  • See the information provided by Sharp Corporation listed under [References]affected

Toshiba Tec Corporation Multiple MFPs (multifunction printers)

  • See the information provided by Toshiba Tec Corporation listed under [References]affected

References