Details of VAR-202410-1678

ID

VAR-202410-1678

CVE

CVE-2024-48870

TITLE

Sharp and Toshiba Tec multifunction printers ( MFP ) multiple vulnerabilities in

Trust: 0.8

sources: JVNDB: JVNDB-2024-011256

DESCRIPTION

Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerability. If crafted input is stored by an administrative user, malicious script may be executed on the web browsers of other victim users. Potential impacts vary depending on the vulnerability, but may include the following: * Crafted HTTP Processing the request causes the product to hang (( CVE-2024-42420 , CVE-2024-43424 , CVE-2024-45829 ) * Crafted HTTP Processing the request allows access to files inside the product (( CVE-2024-45842 ) * Settings registered by a user without administrator privileges API is used (( CVE-2024-47005 ) * Of the product Web The page authentication mechanism is bypassed. (( CVE-2024-48870 )

Trust: 1.62

sources: NVD: CVE-2024-48870 // JVNDB: JVNDB-2024-011256

AFFECTED PRODUCTS

vendor:	sharp	model:	mx-3110n a	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m264nv	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-60c36	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3101n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-6050v	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3071	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-50m26	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-8081	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-7500n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-2310u	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m5051	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-6050n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-4100n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-b382sc	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-4110n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m1205	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-4140n a	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-50c26	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3061	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-2310r	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m264u	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	dx-2500n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-4141n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-c311	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m3551	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3570v	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-c303	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3571	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3071s	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3050v	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m363u	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m464n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-b547wd	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m6071	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-5050n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m503u	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-6070v a	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-b537wr	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-4112n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-b401	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-4070n a	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-6071	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-4070v a	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-5050v	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m453n	scope:	eq	version:	-	Trust: 1.0
vendor:	toshibatec	model:	e-studio908	scope:	lte	version:	t2.12.h3.00	Trust: 1.0
vendor:	sharp	model:	mx-b455wz	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m1054	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m3550	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m265ne	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m315n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m5071	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-4061s	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m356u	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m7570	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3561s	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m315u	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-70m45	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-c310	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m365n a	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3114n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-6051	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-2630n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-70m75	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m356uv	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-b455wt	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3116n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m3571s	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3070v	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m266nv	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m266n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	dx-2000u	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m654n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-70m65	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-30m35	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m265u	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m315nv	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-50c31	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m4071s	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m654n a	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m5071s	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m356n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3610nr	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-90c80	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-2614n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m6070 a	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3560v	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m503n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-2610n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3115n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-7580n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-30m31	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-6071s	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-90c70	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m315v	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-50c55	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-c381	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m265n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-b376w	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3140n a	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-50m36	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-50c36	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-b355wt	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-c380	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m316n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m315ne	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m753n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-6240n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m2651	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-5111n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-2301n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m365n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-b381	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-4051	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m1055	scope:	eq	version:	-	Trust: 1.0
vendor:	toshibatec	model:	e-studio1058	scope:	lte	version:	t1.01.h4.00	Trust: 1.0
vendor:	sharp	model:	mx-c400p	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m4070 a	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-6070n a	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m265nv	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-70c31	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3640n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-5110n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	dx-c311	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-c545wd	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-c535wr	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-30m28t	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-60c45	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3551	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-2640n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3640nr	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m564n a	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-30m28	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-4070n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m3050	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-2640nr	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-6070n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m2630 a	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m564n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-c382sc	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3110n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-b382p	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-70m55	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-2616n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3050v a	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-2600g	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-c301	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3560n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	dx-c400	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m356nv	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m314u	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m314nv	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-5112n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-2615 a	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	dx-c401 j	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	dx-c381	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-70c55	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-b356w	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m3070	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3061s	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m315uv	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m314nr	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m5050	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m905	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3570n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m6070	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-4071	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m1204	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-50m50	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-b456wh	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-70c45	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m465n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-b355w	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-8090n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-1810u	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m5070	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-c303wh	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-70c65	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m6570	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3050n a	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m2630	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3060n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	dx-c401	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m283n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-4140n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-30m31t	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-2314nr	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-b550wd	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3550n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-70m31	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-c303w	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m754n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-30m35t	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-b456w	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-30c25z	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3550v	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m3570	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-c382scb	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3051	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m354nr	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-5071s	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-4050v	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3100g	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m3571	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-4061	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-b540wr	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-5001n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m354n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m363n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-50m45	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-70m90	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m465n a	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-c533wd	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-5000n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-c402sc	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m364n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-c301w	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-5070v	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-30c25y	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-55c26	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m1206	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-70m36	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m316nv	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m565n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-c401	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3561	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m4071	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-5070n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3100n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-2600n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-4070v	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m3071	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-30c25t	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m453u	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-60c31	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-c400	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-c535wd	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m264n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m6071s	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3060v	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m4070	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-b455w	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-2010u	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-4111n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-7090n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-b376wh	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-b400p	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-2651	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3070n a	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3140nr	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-b356wh	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-b355wz	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-4050n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m3051	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-c542wd	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-5140n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m623u	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-5141n a	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m753u	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-4060v	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-50c65	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-b402	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-2601n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-7040n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-2314n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-4060n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-5051	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m4050	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m904	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m264nr	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3070n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-b476w	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-2615n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m354u	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-7081	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3111u	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-c381b	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3140n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m6051	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	dx-c310	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-b402p	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-b382	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-b476wh	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-c380p	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3050n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-6580n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m754n a	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-c312	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-30c25	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-6500n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-70c36	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m1056	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-b402sc	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-c304wh	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-50c45	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m3050 a	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-c304w	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m4051	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-b380p	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-c304	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3610n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	dx-c311j	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m3070 a	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-6070v	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m314n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m6050	scope:	eq	version:	-	Trust: 1.0
vendor:	toshibatec	model:	e-studio1208	scope:	lte	version:	t1.01.h4.00	Trust: 1.0
vendor:	sharp	model:	mx-4101n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-c533wr	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-50m55	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3070v a	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m265v	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-3571s	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-5141n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m265uv	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-4071s	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m623n	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	bp-50m31	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-m3071s	scope:	eq	version:	-	Trust: 1.0
vendor:	sharp	model:	mx-5071	scope:	eq	version:	-	Trust: 1.0
vendor:	東芝テック	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	シャープ株式会社	model:	-	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2024-011256 // NVD: CVE-2024-48870

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2024-48870
value:	MEDIUM
Trust: 1.0
vultures@jpcert.or.jp:	CVE-2024-48870
value:	MEDIUM
Trust: 1.0
OTHER:	JVNDB-2024-011256
value:	MEDIUM
Trust: 0.8

nvd@nist.gov:	CVE-2024-48870
baseSeverity:	MEDIUM
baseScore:	4.8
vectorString:	CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	REQUIRED
scope:	CHANGED
confidentialityImpact:	LOW
integrityImpact:	LOW
availabilityImpact:	NONE
exploitabilityScore:	1.7
impactScore:	2.7
version:	3.1
Trust: 1.0
vultures@jpcert.or.jp:	CVE-2024-48870
baseSeverity:	MEDIUM
baseScore:	6.2
vectorString:	CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	REQUIRED
scope:	CHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	1.7
impactScore:	4.0
version:	3.1
Trust: 1.0
OTHER:	JVNDB-2024-011256
baseSeverity:	MEDIUM
baseScore:	6.2
vectorString:	CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	REQUIRED
scope:	CHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2024-011256 // NVD: CVE-2024-48870 // NVD: CVE-2024-48870

PROBLEMTYPE DATA

problemtype:	CWE-79	Trust: 1.0
problemtype:	Out-of-bounds read (CWE-125) [ others ]	Trust: 0.8
problemtype:	Path traversal (CWE-22) [ others ]	Trust: 0.8
problemtype:	Authentication Bypass Using Alternate Paths or Channels (CWE-288) [ others ]	Trust: 0.8
problemtype:	HTTP Improper invalidation of header script syntax (CWE-644) [ others ]	Trust: 0.8
problemtype:	Exposing dangerous methods or functions (CWE-749) [ others ]	Trust: 0.8
problemtype:	Cross-site scripting (CWE-79) [ others ]	Trust: 0.8

sources: JVNDB: JVNDB-2024-011256 // NVD: CVE-2024-48870

PATCH

title:

Sharp Corporation announcement page Toshiba Tec Toshiba Tec

url:

https://jp.sharp/business/print/information/info_security_2024-10.html

Trust: 0.8

sources: JVNDB: JVNDB-2024-011256

EXTERNAL IDS

db:	JVN	id:	JVNVU95063136	Trust: 1.8
db:	NVD	id:	CVE-2024-48870	Trust: 1.8
db:	JVNDB	id:	JVNDB-2024-011256	Trust: 0.8

sources: JVNDB: JVNDB-2024-011256 // NVD: CVE-2024-48870

REFERENCES

url:	https://global.sharp/products/copier/info/info_security_2024-10.html	Trust: 1.0
url:	https://jvn.jp/en/vu/jvnvu95063136/	Trust: 1.0
url:	https://www.toshibatec.com/information/20241025_01.html	Trust: 1.0
url:	https://jvn.jp/vu/jvnvu95063136/index.html	Trust: 0.8

sources: JVNDB: JVNDB-2024-011256 // NVD: CVE-2024-48870

SOURCES

db:	JVNDB	id:	JVNDB-2024-011256
db:	NVD	id:	CVE-2024-48870

LAST UPDATE DATE

2024-11-06T23:10:52.825000+00:00

SOURCES UPDATE DATE

db:	JVNDB	id:	JVNDB-2024-011256	date:	2024-10-28T07:25:00
db:	NVD	id:	CVE-2024-48870	date:	2024-11-05T19:34:38.287

SOURCES RELEASE DATE

db:	JVNDB	id:	JVNDB-2024-011256	date:	2024-10-28T00:00:00
db:	NVD	id:	CVE-2024-48870	date:	2024-10-25T07:15:04.853