CVEvulnerability

CVE-2024-45842

5.3 MEDIUM Published 2024-10-25 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-10-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-22

Description

Sharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path Traversal vulnerability. Unintended internal files may be retrieved when processing crafted HTTP requests.

Affected configurations

• toshibatec e-studio1058 firmware (<= t1.01.h4.00) • toshibatec e-studio1208 firmware (<= t1.01.h4.00) • toshibatec e-studio908 firmware (<= t2.12.h3.00) • sharp bp-90c70 firmware • sharp bp-90c80 firmware • sharp bp-70c65 firmware • sharp bp-70c55 firmware • sharp bp-70c45 firmware • sharp bp-70c36 firmware • sharp bp-70c31 firmware • sharp bp-60c45 firmware • sharp bp-60c36 firmware • sharp bp-60c31 firmware • sharp bp-50c65 firmware • sharp bp-50c55 firmware • sharp bp-50c45 firmware • sharp bp-50c36 firmware • sharp bp-50c31 firmware • sharp bp-50c26 firmware • sharp bp-55c26 firmware • sharp mx-8081 firmware • sharp mx-7081 firmware • sharp mx-6071 firmware • sharp mx-5071 firmware • sharp mx-4071 firmware • sharp mx-3571 firmware • sharp mx-3071 firmware • sharp mx-4061 firmware • sharp mx-3561 firmware • sharp mx-3061 firmware • sharp mx-6051 firmware • sharp mx-5051 firmware • sharp mx-4051 firmware • sharp mx-3551 firmware • sharp mx-3051 firmware • sharp mx-2651 firmware • sharp mx-6071s firmware • sharp mx-5071s firmware • sharp mx-4071s firmware • sharp mx-3571s firmware • sharp mx-3071s firmware • sharp mx-4061s firmware • sharp mx-3561s firmware • sharp mx-3061s firmware • sharp bp-30c25 firmware • sharp bp-30c25y firmware • sharp bp-30c25z firmware • sharp bp-30c25t firmware • sharp mx-7580n firmware • sharp mx-6580n firmware • sharp mx-8090n firmware • sharp mx-7090n firmware • sharp mx-6070n firmware • sharp mx-5070n firmware • sharp mx-4070n firmware • sharp mx-3570n firmware • sharp mx-3070n firmware • sharp mx-4060n firmware • sharp mx-3560n firmware • sharp mx-3060n firmware … and 260 more

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References