CVE-2024-29978 Vulnerability Details

  /     /     /  

CVE-2024-29978 Metadata Quick Info

CVE Published: 26/11/2024 | CVE Updated: 26/11/2024 | CVE Year: 2024
Source: jpcert | Vendor: Sharp Corporation | Product: Multiple MFPs (multifunction printers)
Status : PUBLISHED

---

CVE-2024-29978 Description

User passwords are decrypted and stored on memory before any user logged in. Those decrypted passwords can be retrieved from the coredump file. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

Metrics

CVSS Version: 3.1 | Base Score: 5.9 MEDIUM
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-256
CWE Name: Plaintext storage of a password
Source: Sharp Corporation

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).