Vulnerability · Published Oct 1, 2026 · Assigned by VulnCheck

CVE-2024-58388Sharp Multifunction Printers Local File Inclusion via installed_emanual_down.html

High 7.5

In plain English

A high-severity path traversal in Multiple Multifunction Printers from Sharp Corporation. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.8%top 42.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Sharp (and Toshiba Tec rebranded) multifunction printers contain an unauthenticated local file inclusion vulnerability that allows remote attackers to read arbitrary files by manipulating the path parameter in the installed_emanual_down.html endpoint. Attackers can supply directory traversal sequences such as path=/manual/../../../<path> to access files outside the intended manual directory, including /etc/passwd, coredump files containing credentials, and system configuration files. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-07-30.

Affected products (as reported)

Vendor	Product	Versions
Sharp Corporation	Multiple Multifunction Printers	*
Toshiba Tec Corporation	Multiple Multifunction Printers	*

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

Researcher Disclosure exploit, technical-description
Nuclei Template technical-description
https://www.vulncheck.com/advisories/sharp-multifunction-printers-local-file-inclusion-via-installed-emanual-down-html third-party-advisory