Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2024-33610

"sessionlist.html" and "sys_trayentryreboot.html" are accessible with no authentication. "sessionlist.html" provides logged-in users' session information including session cookies,

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jpcert

Description

"sessionlist.html" and "sys_trayentryreboot.html" are accessible with no authentication. "sessionlist.html" provides logged-in users' session information including session cookies, and "sys_trayentryreboot.html" allows to reboot the device. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Sharp Corporation Multiple MFPs (multifunction printers)

  • See the information provided by Sharp Corporation listed under [References]affected

Toshiba Tec Corporation Multiple MFPs (multifunction printers)

  • See the information provided by Toshiba Tec Corporation listed under [References]affected

References