Description
Sharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path Traversal vulnerability. Unintended internal files may be retrieved when processing crafted HTTP requests.
Metrics
CVSS 3.1 5.3/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Sharp Corporation | Sharp Digital Full-color MFPs and Monochrome MFPs | see the information provided by Sharp Corporation |
| Toshiba Tec Corporation | e-STUDIO 908 | T2.12.h3.00 and earlier versions |
| Toshiba Tec Corporation | e-STUDIO 1058 | T1.01.h4.00 and earlier versions |
| Toshiba Tec Corporation | e-STUDIO 1208 | T1.01.h4.00 and earlier versions |
| toshibatec | e-studio-1058_firmware | <= t1.01.h4.00 |
| sharp | bp-90c80_firmware | <= 210 |
| sharp | bp-70c65_firmware | <= 320 |
| sharp | mx-8081_firmware | <= 160 |
| sharp | mx-6071s_firmware | <= 613 |
| sharp | bp-30c25_firmware | <= 130 |
| sharp | mx-7580n_firmware | <= 503 |
| sharp | mx-8090n_firmware | <= 405 |
| sharp | mx-6070v_firmware | <= 802 |
| toshibatec | e-studio-1208_firmware | <= t1.01.h4.00 |
| sharp | bp-c545wd_firmware | <= 262 |
| sharp | mx-c304wh_firmware | <= 520 |
| sharp | bp-70m90_firmware | <= 310 |
| sharp | bp-70m65_firmware | <= 320 |
| sharp | mx-m1206_firmware | <= 200 |
| sharp | mx-m7570_firmware | <= 456 |
| sharp | mx-m6071s_firmware | <= 413 |
| sharp | bp-30m35t_firmware | <= 220 |
| sharp | mx-b476wh_firmware | <= 413 |
| sharp | mx-m905_firmware | <= 612 |
| sharp | mx-m6070_firmware | <= 503 |
| sharp | bp-b550wd_firmware | <= 260 |
| sharp | mx-b455wz_firmware | <= 404 |
| toshibatec | e-studio-908_firmware | <= t2.12.h3.00 |
References
- https://global.sharp/products/copier/info/info_security_2024-10.htmlVendor Advisory
- https://jvn.jp/en/vu/JVNVU95063136/Third Party Advisory
- https://www.toshibatec.com/information/20241025_01.htmlVendor Advisory
Timeline
- Published
- Oct 25, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed