CVE-2024-47406: Sharp Corporation Sharp Digital Full-color MFPs and

9.1

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.

Описание

Оригинално описание

Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability.

Sharp Corporation Sharp Digital Full-color MFPs and Monochrome MFPs: see the information provided by Sharp Corporation
Toshiba Tec Corporation e-STUDIO 908: T2.12.h3.00 and earlier versions
Toshiba Tec Corporation e-STUDIO 1058: T1.01.h4.00 and earlier versions
Toshiba Tec Corporation e-STUDIO 1208: T1.01.h4.00 and earlier versions
sharp bp-90c80_firmware: до 210
sharp bp-70c65_firmware: до 320
sharp mx-8081_firmware: до 160
sharp mx-b476wh_firmware: до 413
sharp mx-m905_firmware: до 612
sharp mx-6071s_firmware: до 613
sharp bp-30c25_firmware: до 130
sharp mx-7580n_firmware: до 503
sharp mx-8090n_firmware: до 405
sharp mx-6070v_firmware: до 802
sharp bp-c545wd_firmware: до 262
sharp mx-c304wh_firmware: до 520
sharp bp-70m90_firmware: до 310
sharp bp-70m65_firmware: до 320
sharp mx-m1206_firmware: до 200
sharp mx-m7570_firmware: до 456
sharp mx-m6071s_firmware: до 413
sharp bp-30m35t_firmware: до 220
sharp mx-m6070_firmware: до 503
sharp bp-b550wd_firmware: до 260
sharp mx-b455wz_firmware: до 404
toshibatec e-studio-908_firmware: до t2.12.h3.00
toshibatec e-studio-1058_firmware: до t1.01.h4.00
toshibatec e-studio-1208_firmware: до t1.01.h4.00