Description
Sharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path Traversal vulnerability.
Unintended internal files may be retrieved when processing crafted HTTP requests.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Sharp | Sharp Digital Full-color MFPs and Monochrome MFPs | see the information provided by Sharp Corporation | — |
| Toshiba Tec | e-STUDIO 908 | T2.12.h3.00 and earlier versions | — |
| Toshiba Tec | e-STUDIO 1058 | T1.01.h4.00 and earlier versions | — |
| Toshiba Tec | e-STUDIO 1208 | T1.01.h4.00 and earlier versions | — |