CVE-2024-36248: API keys for some cloud services are hardcoded in the "main" binary. As for the details of affected product names, model numbers, and versions,...
9.1
CVSS
Description
API keys for some cloud services are hardcoded in the "main" binary. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
Classification
CVE ID: CVE-2024-36248
CVSS Base Severity: CRITICAL
CVSS Base Score: 9.1
Affected Products
Vendor: Sharp Corporation
Product: Multiple MFPs (multifunction printers)
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 12.63% (scored less or equal to compared to others)
EPSS Date: 2025-02-25 (when was this score calculated)
References
https://global.sharp/products/copier/info/info_security_2024-05.htmlhttps://jp.sharp/business/print/information/info_security_2024-05.html
https://www.toshibatec.com/information/20240531_02.html
https://www.toshibatec.co.jp/information/20240531_02.html
https://jvn.jp/en/vu/JVNVU93051062/
https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html