---
id: CVE-2024-33605
title: >-
  Improper processing of some parameters of installed_emanual_list.html and
  installed_emanual_down.html leads to a path traversal vulnerability
summary: >-
  Improper processing of some parameters of installed_emanual_list.html and
  installed_emanual_down.html leads to a path traversal vulnerability. As for
  the details of affected product names, model numbers, and versions, refer to
  the inform…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-22
vendor: Sharp Corporation
product: Multiple MFPs (multifunction printers)
affected:
  - >-
    multiple_mfps_multifunction_printers See the information provided by Sharp
    Corporation listed under [References]
  - >-
    multiple_mfps_multifunction_printers See the information provided by Toshiba
    Tec Corporation listed under [References]
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2024-12-09T22:10:08.649799Z'
exploitAvailable: true
published: '2024-11-26'
updated: '2026-11-04'
sourceUpdated: '2026-11-04T06:20:17.557Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-33605'
references:
  - url: 'https://global.sharp/products/copier/info/info_security_2024-05.html'
  - url: 'https://jp.sharp/business/print/information/info_security_2024-05.html'
  - url: 'https://www.toshibatec.com/information/20240531_02.html'
  - url: 'https://www.toshibatec.co.jp/information/20240531_02.html'
  - url: 'https://jvn.jp/en/vu/JVNVU93051062/'
  - url: >-
      https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html
tags:
  - cve.org
  - exploit-available
epss: 0.06047
epssPercentile: 0.93414
exploits:
  nuclei:
    - CVE-2024-33605
  checkedAt: '2026-11-07T17:44:28.956Z'
ingestedAt: '2026-11-05T20:33:06.721Z'
---

## Overview

Improper processing of some parameters of installed_emanual_list.html and installed_emanual_down.html leads to a path traversal vulnerability. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

## Affected

- `multiple_mfps_multifunction_printers See the information provided by Sharp Corporation listed under [References]`
- `multiple_mfps_multifunction_printers See the information provided by Toshiba Tec Corporation listed under [References]`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.