Vendor
Sharp
47 known vulnerabilities.
Sharp at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 4 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 1 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 5 | 1 |
Products
Multiple MFPs (multifunction printers) 14
Sharp Digital Full-color MFPs and Monochrome MFPs 9
Energy Management Controller with Cloud Services 7
home 5G HR02 6
Wi-Fi STATION SH-54C 6
Wi-Fi STATION SH-52B 5
Sharp MFPs 3
Wi-Fi STATION SH-05L 2
PocketWifi 809SH 2
Speed Wi-Fi NEXT W07 2
RW-4040 tool to verify execution environment for Windows 7 1
RW-5100 tool to verify execution environment for Windows 7 1
RW-5100 tool to verify execution environment for Windows 8.1 1
home 5G HR01 1
RW-5100 driver installer for Windows 7 1
RW-5100 driver installer for Windows 8.1 1
Wi-Fi STATION SH-52A 1
5G Mobile Router SH-U01 1
Pocket WiFi 5G A503SH 1
Speed Wi-Fi 5G X01 1
SHARP multifunction printers 1
RW-4040 driver installer for Windows 7 1
Network Scanner Tool Lite 1
Network Scanner Tool (Bundled software for Sharpdesk) 1
RX-V200 firmware 1
RX-V100 firmware 1
RX-CLV1-P firmware 1
RX-CLV2-B firmware 1
RX-CLV3-N firmware 1
SHARP AQUOS series 1
Multiple Multifunction Printers 0
47 results · Feed
-
Medium 5.3
Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with the initial configuration, requi…
-
Medium 6.5CVE-2026-63563 Public exploit
Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication…
-
Low 2.4
Sharp and Toshiba Tec MFPs (multifunction printers) caches data internally when printing, and leave them uncleared. The…
-
Medium 5.3
Sharp and Toshiba Tec MFPs (multifunction printers) fail to properly authorize requests to directly access certain imag…
-
Medium 5.7
SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authenti…
-
High 7.2
home 5G HR02 and Wi-Fi STATION SH-54C contain an OS command injection vulnerability in the configuration restore functi…
-
Medium 5.9
Multiple SHARP routers contain an improper authentication vulnerability in the configuration backup function. The produ…
-
Medium 5.3
home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow vulnerability in the hidden debu…
-
Critical 9.8
Multiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be executed with the root p…
-
High 7.2
home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain an OS command injection vulnerability in the HOST …
-
High 7.5
Out-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple MFPs (multifunction p…
-
High 7.5
The web interface of the affected devices process some crafted HTTP requests improperly, leading to a device crash. Mor…
-
High 7.4
Cross-site scripting vulnerability exists in Sharp Corporation and Toshiba Tech Corporation multiple MFPs (multifunctio…
-
Critical 9.1
API keys for some cloud services are hardcoded in the "main" binary. As for the details of affected product names, mode…
-
Critical 9.1
There are several hidden accounts. Some of them are intended for maintenance engineers, and with the knowledge of their…
-
Medium 5.3
The web interface of the affected devices is designed to hide the LDAP credentials even for administrative users. But c…
-
Medium 5.3
Admin authentication can be bypassed with some specific invalid credentials, which allows logging in with an administra…
-
Critical 9.1CVE-2024-33610 EPSS 50%
"sessionlist.html" and "sys_trayentryreboot.html" are accessible with no authentication. "sessionlist.html" provides lo…
-
High 7.5
Improper processing of some parameters of installed_emanual_list.html and installed_emanual_down.html leads to a path t…
-
Medium 5.9
User passwords are decrypted and stored on memory before any user logged in. Those decrypted passwords can be retrieved…
-
Medium 5.9
User passwords are decrypted and stored on memory before any user logged in. Those decrypted passwords can be retrieved…
-
Medium 5.9
User passwords are decrypted and stored on memory before any user logged in. Those decrypted passwords can be retrieved…
-
Medium 5.9
Affected devices create coredump files when crashed, storing them with world-readable permission. Any local user of the…
-
Critical 9.0
The web interface of the affected devices processes a cookie value improperly, leading to a stack buffer overflow. More…
-
Medium 6.2
Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site sc…
-
High 7.4
Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site sc…
-
High 7.4
Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unint…
-
Critical 9.1
Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulne…
-
High 8.1
Sharp and Toshiba Tec MFPs provide configuration related APIs. They are expected to be called by administrative users o…
-
Medium 5.3
Sharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path Traversal vulnerability…
-
Medium 4.9
Sharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are improperl…
-
High 7.5
Sharp and Toshiba Tec MFPs improperly process HTTP request headers, resulting in an Out-of-bounds Read vulnerability. C…
-
High 7.5
Sharp and Toshiba Tec MFPs contain multiple Out-of-bounds Read vulnerabilities, due to improper processing of keyword s…
-
Critical 9.8
Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent un…
-
Critical 9.1
Server-side request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1…
-
High 7.5
Path traversal vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earl…
-
Critical 9.3
Cross-site scripting vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 an…
-
Medium 6.1
Cross-site request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.…
-
Medium 6.5
Improper access control vulnerability exists in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B…
-
High 8.8
Improper authentication vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1…