CVE-2024-36251: Sharp Bp-b537wr

High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days.

The web interface of the affected devices process some crafted HTTP requests improperly, leading to a device crash. More precisely, a crafted parameter to billcodedef_sub_sel.html is not processed properly and device-crash happens. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

Affected products

• Sharp Bp-b537wr: version 250 only
• Sharp Bp-b540wr: version 250 only
• Sharp Bp-b547wd: version 250 only
• Sharp Bp-b550wd: version 250 only
• Sharp Mx-b355w: version 404 only
• Sharp Mx-b355wt: version 404 only
• Sharp Mx-b355wz: version 404 only
• Sharp Mx-b455w: version 404 only
• Sharp Mx-b455wt: version 404 only
• Sharp Mx-b455wz: version 404 only
• Sharp Mx-m2630: version 502 only
• Sharp Mx-m3050: version 502 only
• Sharp Mx-m3070: version 502 only
• Sharp Mx-m3550: version 502 only
• Sharp Mx-m3570: version 502 only
• Sharp Mx-m4050: version 502 only
• Sharp Mx-m4070: version 502 only
• Sharp Mx-m5050: version 502 only
• Sharp Mx-m5070: version 502 only
• Sharp Mx-m6050: version 502 only
• Sharp Mx-m6070: version 502 only
• Sharp Mx-m905: version 611 only
• Sharp Corporation Multiple Mfps Multifunction Printers
• Toshiba Tec Corporation Multiple Mfps Multifunction Printers

Published 2024-11-26. Last modified 2026-06-17.