by Kastro
Paper/Archive/CVE-2024-47406

CVE-2024-47406

Sharp Corporation Sharp Digital Full-color MFPs and Monochrome MFPs — Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability.

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
39
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 49.5.495 × 209.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability.

Affected

ProductAffectedFixed inSource
Sharp Digital Full-color MFPs and Monochrome MFPssee the information provided by Sharp Corporation–CNA
e-STUDIO 908T2.12.h3.00 and earlier versions–CNA
e-STUDIO 1058T1.01.h4.00 and earlier versions–CNA
e-STUDIO 1208T1.01.h4.00 and earlier versions–CNA
bp-90c80_firmware≤ 210–CISA-ADP
bp-70c65_firmware≤ 320–CISA-ADP
mx-8081_firmware≤ 160–CISA-ADP
mx-b476wh_firmware≤ 413–CISA-ADP
mx-m905_firmware≤ 612–CISA-ADP
mx-6071s_firmware≤ 613–CISA-ADP
bp-30c25_firmware≤ 130–CISA-ADP
mx-7580n_firmware≤ 503–CISA-ADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
jpcert (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refjvn.jp/en/vu/JVNVU95063136refglobal.sharp/products/copier/info/info_security_2024-10.htmlreftoshibatec.com/information/20241025_01.html