CVE-2024-46873: Active Debug Code

Multiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be executed with the root privilege by a remote unauthenticated attacker...

JVN#61635834: Multiple vulnerabilities in SHARP routers

SHARP routers contain multiple vulnerabilities listed below. OS command injection vulnerability in the HOST name configuration screen CWE-78 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Base Score 7.2 CVE-2024-45721 The hidden debug function is enabled CWE-489...

PT-2024-10302

Name of the Vulnerable Software and Affected Versions SHARP routers affected versions not specified Description The issue is related to a hidden debug function that is enabled in multiple SHARP routers, allowing an arbitrary OS command to be executed with root privilege by a remote unauthenticate...

CVE-2024-36249

Cross-site scripting vulnerability exists in Sharp Corporation and Toshiba Tech Corporation multiple MFPs multifunction printers. If this vulnerability is exploited, an arbitrary script may be executed on the administrative page of the affected MFPs. As for the details of affected product names,...

CVE-2024-36254

Out-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple MFPs multifunction printers, which may lead to a denial-of-service DoS condition...

CVE-2024-33616

Admin authentication can be bypassed with some specific invalid credentials, which allows logging in with an administrative privilege. Sharp Corporation states the telnet feature is implemented on older models only, and is planning to provide the firmware update to remove the feature. As for the...

CVE-2024-36254

CVE-2024-36254 affects Sharp Corporation and Toshiba Tec Corporation multifunction printers (MFPs). The issue is an out-of-bounds read in affected MFP firmware that may cause a denial-of-service condition. The connected sources confirm the affected product scope and the impact as described, but d...

CVE-2024-36254

Out-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple MFPs multifunction printers, which may lead to a denial-of-service DoS condition...

CVE-2024-36254

Out-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple MFPs multifunction printers, which may lead to a denial-of-service DoS condition...

CVE-2024-36249

Cross-site scripting vulnerability exists in Sharp Corporation and Toshiba Tech Corporation multiple MFPs multifunction printers. If this vulnerability is exploited, an arbitrary script may be executed on the administrative page of the affected MFPs. As for the details of affected product names,...

CVE-2024-36249

CVE-2024-36249 affects Sharp Corporation and Toshiba Tech Corporation multifunction printers (MFPs). The issue is Cross-site Scripting (CWE-79) on the administrative web interface, potentially allowing an arbitrary script to be executed in the admin context. Affected components are the MFP firmwa...

CVE-2024-36249

Cross-site scripting vulnerability exists in Sharp Corporation and Toshiba Tech Corporation multiple MFPs multifunction printers. If this vulnerability is exploited, an arbitrary script may be executed on the administrative page of the affected MFPs. As for the details of affected product names,...

CVE-2024-33616

Admin authentication can be bypassed with some specific invalid credentials, which allows logging in with an administrative privilege. Sharp Corporation states the telnet feature is implemented on older models only, and is planning to provide the firmware update to remove the feature. As for the...

CVE-2024-33616

CVE-2024-33616 affects Sharp MFPs (Sharp Multi-Function Printers). Reported issue: admin authentication can be bypassed using specific invalid credentials, allowing login with administrative privileges. The telnet feature is noted as present only on older models, with Sharp planning a firmware up...

Sharp MFP和Toshiba MFP 跨站脚本漏洞

Sharp MFP is a series of multifunction printers from Sharp Corporation, Japan.Toshiba MFP is a series of printers from Toshiba Corporation, Japan. A cross-site scripting vulnerability exists in Sharp MFP and Toshiba MFP that originates from arbitrary scripts that can be executed on the...

Sharp MFP和Toshiba MFP 安全漏洞

Sharp MFP is a series of multifunction printers from Sharp Corporation, Japan.Toshiba MFP is a series of printers from Toshiba Corporation, Japan. A security vulnerability exists in Sharp MFP and Toshiba MFP that stems from an out-of-bounds read issue that makes them susceptible to...

PT-2024-25378

Name of the Vulnerable Software and Affected Versions Sharp Corporation products affected versions not specified Description The issue allows admin authentication to be bypassed using specific invalid credentials, granting administrative privileges. The telnet feature, which is implemented on old...

PT-2024-26934 · Sharp +1 · Sharp Mfps +1

Name of the Vulnerable Software and Affected Versions: Sharp Corporation and Toshiba Tec Corporation multiple MFPs multifunction printers affected versions not specified Description: An out-of-bounds read issue exists, which may lead to a denial-of-service DoS condition. Recommendations: At the...

PT-2024-26931 · Sharp +1 · Sharp Mfps +1

Name of the Vulnerable Software and Affected Versions: Sharp Corporation MFPs affected versions not specified Toshiba Tech Corporation MFPs affected versions not specified Description: A cross-site scripting issue exists in multiple MFPs from Sharp Corporation and Toshiba Tech Corporation. This...

CVE-2024-33616: Missing Authentication for Critical Function

Admin authentication can be bypassed with some specific invalid credentials, which allows logging in with an administrative privilege. Sharp Corporation states the telnet feature is implemented on older models only, and is planning to provide the firmware update to remove the feature. As for the...