October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PCOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk3 min

Sharp Printer CVE-2024-58388: Exploitation Reports, PoC Claims and What to Do

CVE-2024-58388 reportedly lets reachable Sharp and Toshiba Tec MFPs expose local files. Here is what exploitation reporting and public technical materials establish, plus practical steps for administrators.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

CVE-2024-58388 is a reported unauthenticated path-traversal flaw affecting Sharp and Toshiba Tec multifunction printers (MFPs). It may let a remote requester who can reach a printer’s web interface read files outside the intended manual directory. Later CVE summaries attribute exploitation evidence to Shadowserver beginning July 30, 2024, but public status records have differed; the claim is not independently confirmed here. Public technical details and a Nuclei detection template are available, but a standalone working exploit PoC is not verified.

What CVE-2024-58388 does

The vulnerability is categorized as CWE-22 path traversal and is associated with the installed_emanual_down.html endpoint and its path parameter. A crafted request can reportedly use traversal sequences to access files beyond the directory intended for electronic manuals. The described issue is unauthenticated, but a printer’s web interface must be reachable to an attacker for the request to matter. See the CVE-2024-58388 tracking summary and the CIRCL vulnerability record.

As an Amazon Associate I earn from qualifying purchases.

Reported examples of readable files include /etc/passwd, system or configuration files, and coredumps that may contain credentials. This is a confidentiality issue: the cited CVSS v3.1 vector assigns high confidentiality impact and no integrity or availability impact. The described flaw is not, by itself, evidence of printer takeover or arbitrary code execution.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Is CVE-2024-58388 being exploited in the wild?

Later CVE summaries say Shadowserver first observed exploitation evidence on July 30, 2024. That is an attributed retrospective report, not independently inspected telemetry. Status snapshots have varied: one tracker reported no known exploitation evidence, while later summaries included the Shadowserver claim. A third-party catalog marked the issue confirmed exploited on October 1, 2026, with confidence listed as 0.70, and noted that it was not in CISA’s Known Exploited Vulnerabilities (KEV) catalog in that snapshot. See the CIRCL record and the GCVE catalog entry.

#1 Best Overall
SuppliesMAX Compatible Replacement for Sharp Compet/CS/ER/QS/VX/XE/ZL Series Black/Red Printer Ribbons (6/PK) (SEO011020)
  • SuppliesMAX Compatible Replacement for Sharp Compet/CS/ER/QS/VX/XE/ZL Series Black/Red Printer Ribbons (6/PK) (SEO011020)
  • SuppliesMAX Dot Matrix Printer Ribbon compatible replacement for Sharp SEO011020. Built with premium materials to match OEM performance and deliver sharp, professional output. Ideal for receipts, invoices, and high-volume business printing. Excellent ink retention minimizes replacement frequency and ensures consistent, reliable operation. Designed for use in the USA.
  • Compatible With Sharp Compet / CS Series / EL Series / ER Series / QS Series / VX Series / XE Series / ZL Series - Universal Calculator S - Wind Ribbon and Other Financial / Series Calculators Series and Other P.O.S Printers.
  • Manufacturing Standards: Manufactured to OEM standards using new and recycled components in ISO 9001 / ISO 14001 certified facilities. Designed for 110V machines sold in the U.S. Use of compatible products will not void your machines manufacturer warranty. Fully compliant with U.S. warranty law.
  • For Reference Only: Brand names, logos, and part numbers are used to indicate product compatibility ; Images shown are illustrative ; Packaging may vary ; Internal part numbers may not match the manufacturers official SKU.

Is there a public PoC?

There are public technical materials, including Pierre Kim’s June 27, 2024 disclosure covering multiple Sharp MFP issues and a ProjectDiscovery Nuclei template. The template is a scanner or detection asset; its existence does not establish that standalone exploit code is publicly available or that the flaw has been successfully exploited. A 2026 article describes 2024 materials as a PoC, but the material reviewed here does not verify a standalone working exploit PoC. Kim’s broader assessment mentions 308 vulnerable models across its assessment; that figure is not a confirmed affected-model count for this CVE. See the original disclosure and the 2026 report.

Which printers are affected, and is there a patch?

Public descriptions identify Sharp MFPs and Toshiba Tec rebranded MFPs, but the reviewed CVE descriptions do not establish a complete model-by-model affected list or fixed firmware versions. The CVE record was published on October 1, 2026, despite the 2024 identifier. Check the exact model, region and installed firmware with the manufacturer or authorized support before treating a device as affected or fixed.

Rank #2
Sale
Brother Genuine DR730 Drum Unit, Up to 12,000 Page Yield (Not a Toner)
  • BROTHER GENUINE DRUM UNIT: The Brother DR-730 Drum Unit is intelligently engineered as part of a complete mono laser printing system.
  • CRISP RESOLUTION: The Brother DR-730 Drum Unit delivers crisp, sharp printing with quality you can consistently rely on.
  • YIELDS UP TO 12,000 PAGES: This mono laser drum unit yields approximately 12,000 pages(1), producing sharp, and brilliant prints.
  • PROTECT YOUR INVESTMENT: By using Brother Genuine Supplies, you’ll ensure a seamless fit and optimal integration with your Brother printer and toner cartridges.
  • FOR USE WITH BROTHER MONO LASER PRINTERS AND ALL-IN-ONES: DCP-L2550DW, HL-L2350DW, HL-L2370DW, HL-L2370DW XL, HL-L2390DW, HL-L2395DW, MFC-L2710DW, MFC-L2750DW, MFC-L2750DW XL.

Sharp’s product security advisory index is a starting point for model-specific guidance. Sharp’s MFP security notice gives general advice about protecting devices from outside networks; it should not be read as confirmation of a CVE-2024-58388-specific patch version.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What administrators should do

  1. Restrict reachability now. Keep the printer’s web and management interfaces off the public internet. Use firewall rules or network segmentation so only trusted networks and administrators can reach them.
  2. Check the exact device. Record the model, region and firmware version, then consult Sharp or Toshiba Tec support or an authorized service provider for CVE-specific status and supported updates. Apply vendor-issued firmware guidance where available.
  3. Plan for unsupported equipment. If the manufacturer no longer supports the MFP, consider replacement rather than relying on a fix that is not available.
  4. Review available logs. If the device or network records requests, look for suspicious traversal attempts involving installed_emanual_down.html. Logging availability and useful detail vary by environment; this is a practical monitoring step based on the reported request pattern, not a quoted vendor instruction.

Sharp’s broader security guidance also warns against direct internet connections and emphasizes strong administrative passwords and firewall protection. Access controls reduce exposure, but they do not substitute for a vendor fix when one is available.

Rank #3
1/8" Die Replacement Blade AD1 Diamond 1 Corner Rounding Machine
  • 1/8" Die Replacement Blade for AD1 Corner Rounding Machines
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

How the severity scores differ

The published scores use different CVSS versions, so they are not competing measurements from the same scale. They describe technical severity, not the number of attacks, affected devices or victims.

Quick Recap

SaleBestseller No. 2
Brother Genuine DR730 Drum Unit, Up to 12,000 Page Yield (Not a Toner)
Brother Genuine DR730 Drum Unit, Up to 12,000 Page Yield (Not a Toner)
Note: Item is only the drum unit, does not contain toner.; Product packaging may vary
$115.99
Bestseller No. 3
1/8' Die Replacement Blade AD1 Diamond 1 Corner Rounding Machine
1/8" Die Replacement Blade AD1 Diamond 1 Corner Rounding Machine
1/8" Die Replacement Blade for AD1 Corner Rounding Machines
$27.50
Bestseller No. 4
MXC30HB Genuine Sharp Toner Collection Container, 8000 Page-Yield
MXC30HB Genuine Sharp Toner Collection Container, 8000 Page-Yield
Genuine Sharp toner collection container for MXC250, MXC300w, MXC301W.
$23.37
Bestseller No. 5
CeaMere Calculator Printer Ribbon Roller IR40 for Casio HR-8TM HR-8TM Plus
CeaMere Calculator Printer Ribbon Roller IR40 for Casio HR-8TM HR-8TM Plus
Calculator Printer paper Roller Replacement; ir-40 Calculator Printer paper Roller Replacement.
$15.99
Best Value
CeaMere Calculator Printer Ribbon Roller IR40 for Casio HR-8TM HR-8TM Plus
  • IR-40 Calculator Printer paper Roller Replacement IR40 IR-40 for Casio HR-8TM HR-8TM Plus for Sharp XE-A107 EA770R and More.
  • Compatible with Casio: 101ER /110CR /115ER /116ER /120CR /130CR/140CR /150CR/160CR /800ER/HP-100T /HR-100 /HR-100A /HR-100S /HR-121 /HR-15 /HR-150 Series /HR-150L /HR-150LA /HR-150LB /HR-16 /HR-200 /HR-5 /HR-7 /HR-8 /HR-8B /HR-8L /HR-8L Plus /HR-8LGY /HR-8TE /HR-8TE Plus /HR-8TM /HR-8TM Plus /PCR-202 /PCR-250 /PCR-255.
  • Compatible with SHARP : CS1623 / A70R / 1611 / EA770R / ERC150 / ERC140 / PCR255 / PCR160 / PCR165 /.
  • Calculator Printer paper Roller Replacement
  • ir-40 Calculator Printer paper Roller Replacement.
Rank #4
MXC30HB Genuine Sharp Toner Collection Container, 8000 Page-Yield
  • Genuine Sharp toner collection container for MXC250, MXC300w, MXC301W.
CVSS version Score Source context
CVSS v3.1 7.5 CVE tracking summaries, 2026
CVSS v4.0 8.7 CVE tracking summaries, 2026

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.