CVE-2024-36251

The web interface of the affected devices process some crafted HTTP requests improperly, leading to a device crash. More precisely, a crafted parameter to billcodedef_sub_sel.html is not processed properly and device-crash happens. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

• CWE-125

• https://global.sharp/products/copier/info/info_security_2024-05.html
• https://jp.sharp/business/print/information/info_security_2024-05.html
• https://jvn.jp/en/vu/JVNVU93051062/
• https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html
• https://www.toshibatec.co.jp/information/20240531_02.html
• https://www.toshibatec.com/information/20240531_02.html
• http://seclists.org/fulldisclosure/2024/Jul/0

Published

Nov 26, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-36246Missing authorization vulnerability exists in Unifier and Un…9.8
• CVE-2024-36247Improper access control in Intel(R) RAID Web Console all ver…5.7
• CVE-2024-36248API keys for some cloud services are hardcoded in the "main"…9.1
• CVE-2024-36249Cross-site scripting vulnerability exists in Sharp Corporati…7.4
• CVE-2024-3625A flaw was found in Quay, where Quay's database is stored in…7.3
• CVE-2024-36250Mattermost versions 9.11.x <= 9.11.2, and 9.5.x <= 9.5.10 fa…4.8
• CVE-2024-36252Improper restriction of communication channel to intended en…6.3
• CVE-2024-36253Uncontrolled search path in the Intel(R) SDP Tool for Window…7.8
• CVE-2024-36254Out-of-bounds read vulnerability exists in Sharp Corporation…7.5
• CVE-2024-36255Mattermost versions 9.5.x <= 9.5.3, 9.6.x <= 9.6.1 and 8.1.x…5.7
• CVE-2024-36257Mattermost versions 9.5.x <= 9.5.5 and 9.8.0, when using sha…5.3
• CVE-2024-36258A stack-based buffer overflow vulnerability exists in the to…9.8