Multiple MFPs (multifunction printers)

Every one of the 14 is a mark on the map. Named now: 1 to 14, most at risk first.

1. Sharp Multifunction Printers - Cookie ExposureCVE-2024-33610Sharp Corporation · CVSS 9.1 · 50% likely

   CWE-288

2. Sharp Multifunction Printers - Directory ListingCVE-2024-33605Sharp Corporation · CVSS 7.5 · 6.0% likely

   CWE-22

3. The web interface of the affected devices process some crafted HTTP requests improperly, leading to a device crash. More precisely, a crafted parameter to billcodedef_sub_sel.html…CVE-2024-36251Sharp Corporation · CVSS 7.5 · 3.5% likely

   CWE-125

4. The web interface of the affected devices processes a cookie value improperly, leading to a stack buffer overflow. More precisely, giving too long character string to MFPSESSIONID…CVE-2024-28038Sharp Corporation · CVSS 9 · 2.6% likely

   CWE-121

5. Affected devices create coredump files when crashed, storing them with world-readable permission. Any local user of the device can examine the coredump files, and research the mem…CVE-2024-28955Sharp Corporation · CVSS 5.9 · 1.3% likely

   CWE-732

6. User passwords are decrypted and stored on memory before any user logged in. Those decrypted passwords can be retrieved from the coredump file. As for the details of affected prod…CVE-2024-32151Sharp Corporation · CVSS 5.9 · 1.3% likely

   CWE-257

7. User passwords are decrypted and stored on memory before any user logged in. Those decrypted passwords can be retrieved from the coredump file. As for the details of affected prod…CVE-2024-29978Sharp Corporation · CVSS 5.9 · 1.3% likely

   CWE-256

8. API keys for some cloud services are hardcoded in the "main" binary. As for the details of affected product names, model numbers, and versions, refer to the information provided b…CVE-2024-36248Sharp Corporation · CVSS 9.1 · 1.1% likely

   CWE-798

9. There are several hidden accounts. Some of them are intended for maintenance engineers, and with the knowledge of their passwords (e.g., by examining the coredump), these accounts…CVE-2024-35244Sharp Corporation · CVSS 9.1 · 1.1% likely

   CWE-798

10. Admin authentication can be bypassed with some specific invalid credentials, which allows logging in with an administrative privilege. Sharp Corporation states the telnet feature…CVE-2024-33616Sharp Corporation · CVSS 5.3 · 0.9% likely

    CWE-306

11. User passwords are decrypted and stored on memory before any user logged in. Those decrypted passwords can be retrieved from the coredump file. As for the details of affected prod…CVE-2024-29146Sharp Corporation · CVSS 5.9 · 0.8% likely

    CWE-312

12. The web interface of the affected devices is designed to hide the LDAP credentials even for administrative users. But configuring LDAP authentication to "SIMPLE", the device commu…CVE-2024-34162Sharp Corporation · CVSS 5.3 · 0.8% likely

    CWE-767

13. Out-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple MFPs (multifunction printers), which may lead to a denial-of-service (DoS) condit…CVE-2024-36254Sharp Corporation · CVSS 7.5 · 0.7% likely

    CWE-125

14. Cross-site scripting vulnerability exists in Sharp Corporation and Toshiba Tech Corporation multiple MFPs (multifunction printers). If this vulnerability is exploited, an arbitrar…CVE-2024-36249Sharp Corporation · CVSS 7.4 · 0.6% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.