CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2024-43424
High (7.5) in sharp. EPSS 0.8% chance of exploitation in the next 30 days.
Sharp and Toshiba Tec MFPs improperly process HTTP request headers, resulting in an Out-of-bounds Read vulnerability.
Crafted HTTP requests may cause affected products crashed.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
- CWE
- CWE-125
- Published
- Modified
- Record from
- the NVD, synced
Affected
- sharp:bp-30c25_firmware
- sharp:bp-30c25t_firmware
- sharp:bp-30c25y_firmware
- sharp:bp-30c25z_firmware
- sharp:bp-30m28_firmware
- sharp:bp-30m28t_firmware
- sharp:bp-30m31_firmware
- sharp:bp-30m31t_firmware
- sharp:bp-30m35_firmware
- sharp:bp-30m35t_firmware
- sharp:bp-50c26_firmware
- sharp:bp-50c31_firmware
- sharp:bp-50c36_firmware
- sharp:bp-50c45_firmware
- sharp:bp-50c55_firmware
- sharp:bp-50c65_firmware
- sharp:bp-50m26_firmware
- sharp:bp-50m31_firmware
- sharp:bp-50m36_firmware
- sharp:bp-50m45_firmware
- sharp:bp-50m50_firmware
- sharp:bp-50m55_firmware
- sharp:bp-55c26_firmware
- sharp:bp-60c31_firmware
- sharp:bp-60c36_firmware
- sharp:bp-60c45_firmware
- sharp:bp-70c31_firmware
- sharp:bp-70c36_firmware
- sharp:bp-70c45_firmware
- sharp:bp-70c55_firmware
- sharp:bp-70c65_firmware
- sharp:bp-70m31_firmware
- sharp:bp-70m36_firmware
- sharp:bp-70m45_firmware
- sharp:bp-70m55_firmware
- sharp:bp-70m65_firmware
- sharp:bp-70m75_firmware
- sharp:bp-70m90_firmware
- sharp:bp-90c70_firmware
- sharp:bp-90c80_firmware
- sharp:bp-b537wr_firmware
- sharp:bp-b540wr_firmware
- sharp:bp-b547wd_firmware
- sharp:bp-b550wd_firmware
- sharp:bp-c533wd_firmware
- sharp:bp-c533wr_firmware
- sharp:bp-c535wd_firmware
- sharp:bp-c535wr_firmware
- sharp:bp-c542wd_firmware
- sharp:bp-c545wd_firmware