CVEvulnerability

CVE-2024-47549

6.1 MEDIUM Published 2024-10-25 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-10-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.4 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-116, CWE-644

Description

Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP response headers. Accessing a crafted URL which points to an affected product may cause malicious script executed on the web browser.

Affected configurations

• toshibatec e-studio1058 firmware (<= t1.01.h4.00) • toshibatec e-studio1208 firmware (<= t1.01.h4.00) • toshibatec e-studio908 firmware (<= t2.12.h3.00) • sharp bp-90c70 firmware • sharp bp-90c80 firmware • sharp bp-70c65 firmware • sharp bp-70c55 firmware • sharp bp-70c45 firmware • sharp bp-70c36 firmware • sharp bp-70c31 firmware • sharp bp-60c45 firmware • sharp bp-60c36 firmware • sharp bp-60c31 firmware • sharp bp-50c65 firmware • sharp bp-50c55 firmware • sharp bp-50c45 firmware • sharp bp-50c36 firmware • sharp bp-50c31 firmware • sharp bp-50c26 firmware • sharp bp-55c26 firmware • sharp mx-8081 firmware • sharp mx-7081 firmware • sharp mx-6071 firmware • sharp mx-5071 firmware • sharp mx-4071 firmware • sharp mx-3571 firmware • sharp mx-3071 firmware • sharp mx-4061 firmware • sharp mx-3561 firmware • sharp mx-3061 firmware • sharp mx-6051 firmware • sharp mx-5051 firmware • sharp mx-4051 firmware • sharp mx-3551 firmware • sharp mx-3051 firmware • sharp mx-2651 firmware • sharp mx-6071s firmware • sharp mx-5071s firmware • sharp mx-4071s firmware • sharp mx-3571s firmware • sharp mx-3071s firmware • sharp mx-4061s firmware • sharp mx-3561s firmware • sharp mx-3061s firmware • sharp bp-30c25 firmware • sharp bp-30c25y firmware • sharp bp-30c25z firmware • sharp bp-30c25t firmware • sharp mx-7580n firmware • sharp mx-6580n firmware • sharp mx-8090n firmware • sharp mx-7090n firmware • sharp mx-6070n firmware • sharp mx-5070n firmware • sharp mx-4070n firmware • sharp mx-3570n firmware • sharp mx-3070n firmware • sharp mx-4060n firmware • sharp mx-3560n firmware • sharp mx-3060n firmware … and 260 more

Related

Weakness · CWE (2)

  • CWE-116 Improper Encoding or Escaping of Output weakness
  • CWE-644 Improper Neutralization of HTTP Headers for Scripting Syntax weakness

References