{"affected":[{"product":"Multiple MFPs (multifunction printers)","source":"CNA: jpcert","vendor":"Sharp Corporation","versions":[{"status":"affected","version":"See the information provided by Sharp Corporation listed under [References]"}]},{"product":"Multiple MFPs (multifunction printers)","source":"CNA: jpcert","vendor":"Toshiba Tec Corporation","versions":[{"status":"affected","version":"See the information provided by Toshiba Tec Corporation listed under [References]"}]}],"cveId":"CVE-2024-33605","cwes":["CWE-22"],"description":"Improper processing of some parameters of installed_emanual_list.html and installed_emanual_down.html leads to a path traversal vulnerability. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].","epss":{"date":"2026-11-03","percentile":0.93381,"score":0.06047},"exploits":[],"kev":null,"metrics":[{"score":7.5,"severity":"high","source":"CNA: jpcert","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"}],"modifiedAt":1793773217557,"publishedAt":1732606658329,"references":[{"source":"CNA: jpcert","tags":[],"url":"https://global.sharp/products/copier/info/info_security_2024-05.html"},{"source":"CNA: jpcert","tags":[],"url":"https://jp.sharp/business/print/information/info_security_2024-05.html"},{"source":"CNA: jpcert","tags":[],"url":"https://www.toshibatec.com/information/20240531_02.html"},{"source":"CNA: jpcert","tags":[],"url":"https://www.toshibatec.co.jp/information/20240531_02.html"},{"source":"CNA: jpcert","tags":[],"url":"https://jvn.jp/en/vu/JVNVU93051062/"},{"source":"CNA: jpcert","tags":[],"url":"https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html"},{"source":"ADP: CVE","tags":[],"url":"http://seclists.org/fulldisclosure/2024/Jul/0"}],"remediation":[],"revision":"2e66d1de33a698988c006a37122c36c6c0bdf939014f621c09412f2f5a0afec3","sources":[{"modifiedAt":1793773217557,"name":"CNA: jpcert","retrievedAt":1793776098602,"url":"https://www.cve.org/CVERecord?id=CVE-2024-33605"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793776137109,"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-33605"}],"ssvc":{"assessedAt":1733782208649,"automatable":"yes","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"CVE-2024-33605","updatedAt":1793776137109}