CVE-2024-32151: sharp corporation multiple mfps (multifunction printers)

Vulnerability summary

CVE-2024-32151 is a medium (CVSS 5.9) vulnerability in sharp corporation multiple mfps (multifunction printers). EPSS estimates a 1.25% chance of exploitation in the next 30 days, higher than 69% of scored vulnerabilities.

Timeline

1. 26-11-2024
   PublishedVulnerability first disclosed.
2. 04-11-2025
   Last modifiedVulnerability information updated.

Description

User passwords are decrypted and stored on memory before any user logged in. Those decrypted passwords can be retrieved from the coredump file. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

• CWE-257Storing Passwords in a Recoverable FormatThe storage of passwords in a recoverable format makes them subject to password reuse attacks by malicious users. In fact, it should be noted that recoverable encrypted passwords provide no significant benefit over plaintext passwords since they are subject not only to reuse by malicious attackers but also by malicious insiders. If a system administrator can recover a password directly, or use a brute force search on the available information, the administrator can use the password on other accounts.