CVE Feed

    Dashboard / CVE / CVE-2024-36251

    CVE-2024-36251

    The web interface of the affected devices process some crafted HTTP requests improperly, leading to a device crash. More precisely, a crafted parameter to billcodedef_sub_sel.html is not processed properly and device-crash happens. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

    Published:Nov 26, 2024
    Last Modified:Apr 15, 2026
    EPS:Nov 26, 2024
    EPSS Score:0.00402
    CVSS Score:7.5

    Affected Products

    Vendor
    Sharp
    Product
    Bp-b537wr
    Vendor
    Sharp
    Product
    Bp-b540wr
    Vendor
    Sharp
    Product
    Bp-b547wd
    Vendor
    Sharp
    Product
    Bp-b550wd
    Vendor
    Sharp
    Product
    Mx-b355w
    Vendor
    Sharp
    Product
    Mx-b355wt
    Vendor
    Sharp
    Product
    Mx-b355wz
    Vendor
    Sharp
    Product
    Mx-b455w
    Vendor
    Sharp
    Product
    Mx-b455wt
    Vendor
    Sharp
    Product
    Mx-b455wz
    Vendor
    Sharp
    Product
    Mx-m2630
    Vendor
    Sharp
    Product
    Mx-m3050
    Vendor
    Sharp
    Product
    Mx-m3070
    Vendor
    Sharp
    Product
    Mx-m3550
    Vendor
    Sharp
    Product
    Mx-m3570
    Vendor
    Sharp
    Product
    Mx-m4050
    Vendor
    Sharp
    Product
    Mx-m4070
    Vendor
    Sharp
    Product
    Mx-m5050
    Vendor
    Sharp
    Product
    Mx-m5070
    Vendor
    Sharp
    Product
    Mx-m6050
    Vendor
    Sharp
    Product
    Mx-m6070
    Vendor
    Sharp
    Product
    Mx-m905

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2024-48870 (CVSS 6.2) — Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cros…
    CVE-2024-47801 (CVSS 7.4) — Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cros…
    CVE-2024-47549 (CVSS 7.4) — Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination…
    CVE-2024-47406 (CVSS 9.1) — Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication byp…
    CVE-2024-47005 (CVSS 8.1) — Sharp and Toshiba Tec MFPs provide configuration related APIs. They are expected to be called by administrativ…
    CVE-2024-45842 (CVSS 5.3) — Sharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path Traversal vuln…
    CVE-2024-45829 (CVSS 4.9) — Sharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are …
    CVE-2024-43424 (CVSS 7.5) — Sharp and Toshiba Tec MFPs improperly process HTTP request headers, resulting in an Out-of-bounds Read vulnera…
    CVE-2024-42420 (CVSS 7.5) — Sharp and Toshiba Tec MFPs contain multiple Out-of-bounds Read vulnerabilities, due to improper processing of …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High