Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The web interface of the affected devices process some crafted HTTP requests improperly, leading to a device crash. More precisely, a crafted parameter to billcodedef_sub_sel.html is not processed properly and device-crash happens. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

CVE-2024-36251 is a vulnerability identified in the web interface of multiple Sharp Corporation multifunction printers. The issue stems from an out-of-bounds read triggered by improperly processed crafted HTTP requests, specifically involving a parameter in the billcodedef_sub_sel.html page. When an attacker sends a specially crafted HTTP request to this endpoint, the device attempts to read memory outside the intended bounds, resulting in a crash of the device’s web interface or the entire printer system. This vulnerability does not require any authentication or user interaction, making it remotely exploitable by any attacker with network access to the device. The impact is a denial-of-service (DoS) condition, as the affected printer becomes unresponsive or crashes, disrupting printing and scanning services. The CVSS v3.1 base score is 7.5, reflecting a high severity due to the ease of exploitation (network vector, no privileges required) and the complete loss of availability. No confidentiality or integrity impact is noted. The affected versions and specific models are detailed by Sharp Corporation, and organizations should consult vendor advisories for precise identification. Currently, there are no known exploits in the wild, but the vulnerability’s characteristics make it a candidate for potential exploitation in the future. The root cause is a lack of proper input validation and bounds checking in the web interface code handling HTTP parameters. This vulnerability highlights the risks associated with embedded web interfaces in networked devices, especially multifunction printers that are often connected to corporate networks.

Detailed information about CVE-2024-36251: Out-of-bounds read in Sharp Corporation Multiple MFPs (multifunction printers) affecting Sharp Corporation Multiple M

CVE-2024-36251: Out-of-bounds read in Sharp Corporation Multiple MFPs (multifunction printers) - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-36251: Out-of-bounds read in Sharp Corporation Multiple MFPs (multifunction printers)

Threats Tagged 'cve-2024-36251'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-36251'

Lead Pen Test Professional