CVE-2024-34162

The web interface of the affected devices is designed to hide the LDAP credentials even for administrative users. But configuring LDAP authentication to "SIMPLE", the device communicates with the LDAP server in clear-text. The LDAP password can be retrieved from this clear-text communication. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

• CWE-767

• https://global.sharp/products/copier/info/info_security_2024-05.html
• https://jp.sharp/business/print/information/info_security_2024-05.html
• https://jvn.jp/en/vu/JVNVU93051062/
• https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html
• https://www.toshibatec.co.jp/information/20240531_02.html
• https://www.toshibatec.com/information/20240531_02.html
• http://seclists.org/fulldisclosure/2024/Jul/0

Published

Nov 26, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-34155Calling any of the Parse functions on Go source code which c…4.3
• CVE-2024-34156Calling Decoder.Decode on a message which contains deeply ne…7.5
• CVE-2024-34157Rejected reason: reserved but not needed
• CVE-2024-34158Calling Parse on a "// +build" build tag line with deeply ne…7.5
• CVE-2024-3416A vulnerability classified as critical was found in SourceCo…9.8
• CVE-2024-34161When NGINX Plus or NGINX OSS are configured to use the HTTP/…5.3
• CVE-2024-34163Improper input validation in firmware for some Intel(R) NUC …8.2
• CVE-2024-34164Uncontrolled search path element in some Intel(R) MAS softwa…6.7
• CVE-2024-34165Uncontrolled search path in some Intel(R) oneAPI DPC++/C++ C…6.7
• CVE-2024-34166An os command injection vulnerability exists in the touchlis…9.8
• CVE-2024-34167Uncontrolled search path for the Intel(R) Server Board S2600…6.7
• CVE-2024-3417A vulnerability, which was classified as critical, has been …9.8