← Database

CVE-2024-47005

HIGH CVSS: 8.1 Published: 2024-10-25 Modified: 2026-06-17

Description

Sharp and Toshiba Tec MFPs provide configuration related APIs. They are expected to be called by administrative users only, but insufficiently restricted. A non-administrative user may execute some configuration APIs.

Affected Platforms

Sharp Bp-30C25TSharp Mx-5140N FirmwareSharp Mx-M316Nv FirmwareSharp Mx-M753USharp Bp-30M31T FirmwareSharp Mx-B402Sharp Bp-70M65 FirmwareSharp Bp-50C26Sharp Mx-B382P FirmwareSharp Mx-3116N

Weakness Type

CWE-749, NVD-CWE-Other

References