PT-2024-35176 · Sharp · Sharp Routers

Name of the Vulnerable Software and Affected Versions: SHARP routers affected versions not specified Description: The issue is related to an improper authentication vulnerability in the configuration backup function of SHARP routers. This vulnerability allows a remote unauthenticated attacker to...

Sharp HR02, Sharp SH-52B, and Sharp SH-54C have security vulnerabilities

Sharp HR02 and others are products of Sharp Corporation, Japan.Sharp HR02 is a home router.Sharp SH-52B is a wireless LAN connectivity station.Sharp SH-54C is a wireless LAN connectivity station. A security vulnerability exists in the Sharp HR02, Sharp SH-52B, and Sharp SH-54C. A remote attacker...

JVN#61635834: Multiple vulnerabilities in SHARP routers

SHARP routers contain multiple vulnerabilities listed below. OS command injection vulnerability in the HOST name configuration screen CWE-78 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Base Score 7.2 CVE-2024-45721 The hidden debug function is enabled CWE-489...

PT-2024-10302

Name of the Vulnerable Software and Affected Versions SHARP routers affected versions not specified Description The issue is related to a hidden debug function that is enabled in multiple SHARP routers, allowing an arbitrary OS command to be executed with root privilege by a remote unauthenticate...

CVE-2024-36249

Cross-site scripting vulnerability exists in Sharp Corporation and Toshiba Tech Corporation multiple MFPs multifunction printers. If this vulnerability is exploited, an arbitrary script may be executed on the administrative page of the affected MFPs. As for the details of affected product names,...

CVE-2024-36254

Out-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple MFPs multifunction printers, which may lead to a denial-of-service DoS condition...

CVE-2024-33616

Admin authentication can be bypassed with some specific invalid credentials, which allows logging in with an administrative privilege. Sharp Corporation states the telnet feature is implemented on older models only, and is planning to provide the firmware update to remove the feature. As for the...

CVE-2024-36254

Out-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple MFPs multifunction printers, which may lead to a denial-of-service DoS condition...

CVE-2024-36254

Out-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple MFPs multifunction printers, which may lead to a denial-of-service DoS condition...

CVE-2024-36254

CVE-2024-36254 affects Sharp Corporation and Toshiba Tec Corporation multifunction printers (MFPs). The issue is an out-of-bounds read in affected MFP firmware that may cause a denial-of-service condition. The connected sources confirm the affected product scope and the impact as described, but d...

CVE-2024-36249

CVE-2024-36249 affects Sharp Corporation and Toshiba Tech Corporation multifunction printers (MFPs). The issue is Cross-site Scripting (CWE-79) on the administrative web interface, potentially allowing an arbitrary script to be executed in the admin context. Affected components are the MFP firmwa...

CVE-2024-36249

Cross-site scripting vulnerability exists in Sharp Corporation and Toshiba Tech Corporation multiple MFPs multifunction printers. If this vulnerability is exploited, an arbitrary script may be executed on the administrative page of the affected MFPs. As for the details of affected product names,...

CVE-2024-36249

Cross-site scripting vulnerability exists in Sharp Corporation and Toshiba Tech Corporation multiple MFPs multifunction printers. If this vulnerability is exploited, an arbitrary script may be executed on the administrative page of the affected MFPs. As for the details of affected product names,...

CVE-2024-33616

Admin authentication can be bypassed with some specific invalid credentials, which allows logging in with an administrative privilege. Sharp Corporation states the telnet feature is implemented on older models only, and is planning to provide the firmware update to remove the feature. As for the...

CVE-2024-33616

CVE-2024-33616 affects Sharp MFPs (Sharp Multi-Function Printers). Reported issue: admin authentication can be bypassed using specific invalid credentials, allowing login with administrative privileges. The telnet feature is noted as present only on older models, with Sharp planning a firmware up...

PT-2024-25378

Name of the Vulnerable Software and Affected Versions Sharp Corporation products affected versions not specified Description The issue allows admin authentication to be bypassed using specific invalid credentials, granting administrative privileges. The telnet feature, which is implemented on old...

CVE-2024-33616: Missing Authentication for Critical Function

Admin authentication can be bypassed with some specific invalid credentials, which allows logging in with an administrative privilege. Sharp Corporation states the telnet feature is implemented on older models only, and is planning to provide the firmware update to remove the feature. As for the...

CVE-2024-36254: Out-of-bounds Read

Out-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple MFPs multifunction printers, which may lead to a denial-of-service DoS condition...

PT-2024-26934 · Sharp +1 · Sharp Mfps +1

Name of the Vulnerable Software and Affected Versions: Sharp Corporation and Toshiba Tec Corporation multiple MFPs multifunction printers affected versions not specified Description: An out-of-bounds read issue exists, which may lead to a denial-of-service DoS condition. Recommendations: At the...

PT-2024-26931 · Sharp +1 · Sharp Mfps +1

Name of the Vulnerable Software and Affected Versions: Sharp Corporation MFPs affected versions not specified Toshiba Tech Corporation MFPs affected versions not specified Description: A cross-site scripting issue exists in multiple MFPs from Sharp Corporation and Toshiba Tech Corporation. This...