CVEvulnerability

CVE-2024-47406

9.8 CRITICAL Published 2024-10-25 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-10-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-288, CWE-306

Description

Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability.

Affected configurations

• toshibatec e-studio1058 firmware (<= t1.01.h4.00) • toshibatec e-studio1208 firmware (<= t1.01.h4.00) • toshibatec e-studio908 firmware (<= t2.12.h3.00) • sharp bp-90c70 firmware • sharp bp-90c80 firmware • sharp bp-70c65 firmware • sharp bp-70c55 firmware • sharp bp-70c45 firmware • sharp bp-70c36 firmware • sharp bp-70c31 firmware • sharp bp-60c45 firmware • sharp bp-60c36 firmware • sharp bp-60c31 firmware • sharp bp-50c65 firmware • sharp bp-50c55 firmware • sharp bp-50c45 firmware • sharp bp-50c36 firmware • sharp bp-50c31 firmware • sharp bp-50c26 firmware • sharp bp-55c26 firmware • sharp mx-8081 firmware • sharp mx-7081 firmware • sharp mx-6071 firmware • sharp mx-5071 firmware • sharp mx-4071 firmware • sharp mx-3571 firmware • sharp mx-3071 firmware • sharp mx-4061 firmware • sharp mx-3561 firmware • sharp mx-3061 firmware • sharp mx-6051 firmware • sharp mx-5051 firmware • sharp mx-4051 firmware • sharp mx-3551 firmware • sharp mx-3051 firmware • sharp mx-2651 firmware • sharp mx-6071s firmware • sharp mx-5071s firmware • sharp mx-4071s firmware • sharp mx-3571s firmware • sharp mx-3071s firmware • sharp mx-4061s firmware • sharp mx-3561s firmware • sharp mx-3061s firmware • sharp bp-30c25 firmware • sharp bp-30c25y firmware • sharp bp-30c25z firmware • sharp bp-30c25t firmware • sharp mx-7580n firmware • sharp mx-6580n firmware • sharp mx-8090n firmware • sharp mx-7090n firmware • sharp mx-6070n firmware • sharp mx-5070n firmware • sharp mx-4070n firmware • sharp mx-3570n firmware • sharp mx-3070n firmware • sharp mx-4060n firmware • sharp mx-3560n firmware • sharp mx-3060n firmware … and 260 more

Related

Weakness · CWE (2)

  • CWE-288 Authentication Bypass Using an Alternate Path or Channel weakness
  • CWE-306 Missing Authentication for Critical Functionality weakness

References