CVE-2024-58388 Sharp Multifunction Printers Local File Inclusion via installed_emanual_down.html
Remote attackers can read arbitrary files on Sharp and Toshiba Tec multifunction printers via path traversal in the installed_emanual_down.html endpoint.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-58388?
CVE-2024-58388 is a high-severity path traversal vulnerability in Sharp Corporation Multiple Multifunction Printers, published on 1 Oct 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Sharp (and Toshiba Tec rebranded) multifunction printers contain an unauthenticated local file inclusion vulnerability that allows remote attackers to read arbitrary files by manipulating the path parameter in the installed_emanual_down.html endpoint. Attackers can supply directory traversal sequences such as path=/manual/../../../<path> to access files outside the intended manual directory, including /etc/passwd, coredump files containing credentials, and system configuration files. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-07-30.
Weakness: CWE-22
Which versions are affected by CVE-2024-58388?
How do I fix CVE-2024-58388?
No fix has been published for CVE-2024-58388 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2024-58388 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-58388 exists.
Sources
Also known as GHSA-4h3v-2vrp-hx8f.