References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Change History

The web interface of the affected devices is designed to hide the LDAP credentials even for administrative users. But configuring LDAP authentication to "SIMPLE", the device communicates with the LDAP server in clear-text. The LDAP password can be retrieved from this clear-text communication. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-767

https://global.sharp/products/copier/info/info_security_2024-05.html

https://jp.sharp/business/print/information/info_security_2024-05.html

https://jvn.jp/en/vu/JVNVU93051062/

https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html

https://www.toshibatec.co.jp/information/20240531_02.html

https://www.toshibatec.com/information/20240531_02.html