Sharp and Toshiba Tec MFPs provide configuration related APIs. They are expected to be called by administrative users only, but insufficiently restricted. A non-administrative user may execute some configuration APIs.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:NSharp Bp 30c25
HWSharpall versionsSharp Bp 30c25 Firmware
OSSharpall versionsSharp Bp 30c25t
HWSharpall versionsSharp Bp 30c25t Firmware
OSSharpall versionsSharp Bp 30c25y
HWSharpall versionsSharp Bp 30c25y Firmware
OSSharpall versionsSharp Bp 30c25z
HWSharpall versionsSharp Bp 30c25z Firmware
OSSharpall versionsSharp Bp 50c26
HWSharpall versionsSharp Bp 50c26 Firmware
OSSharpall versionsSharp Bp 50c31
HWSharpall versionsSharp Bp 50c31 Firmware
OSSharpall versionsSharp Bp 50c36
HWSharpall versionsSharp Bp 50c36 Firmware
OSSharpall versionsSharp Bp 50c45
HWSharpall versionsSharp Bp 50c45 Firmware
OSSharpall versionsSharp Bp 50c55
HWSharpall versionsSharp Bp 50c55 Firmware
OSSharpall versionsSharp Bp 50c65
HWSharpall versionsSharp Bp 50c65 Firmware
OSSharpall versionsSharp Bp 55c26
HWSharpall versionsSharp Bp 55c26 Firmware
OSSharpall versionsSharp Bp 60c31
HWSharpall versionsSharp Bp 60c31 Firmware
OSSharpall versionsSharp Bp 60c36
HWSharpall versionsSharp Bp 60c36 Firmware
OSSharpall versionsSharp Bp 60c45
HWSharpall versionsSharp Bp 60c45 Firmware
OSSharpall versionsSharp Bp 70c31
HWSharpall versionsSharp Bp 70c31 Firmware
OSSharpall versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2024-47406CRITICAL9.1PL ✓same product
Pominięcie uwierzytelnienia w urządzeniach MFP Sharp i Toshiba Tec
CVE-2022-45796CRITICAL9.1PL ✓same product
Command injection w SHARP MFP — zdalne wykonanie poleceń przez nw_interface.html
CVE-2024-47549HIGH7.4same product
Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination...
CVE-2024-47801HIGH7.4same product
Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cros...
CVE-2024-42420HIGH7.5same product
Sharp and Toshiba Tec MFPs contain multiple Out-of-bounds Read vulnerabilities, due to improper processing of ...