Description
Sharp and Toshiba Tec MFPs provide configuration related APIs. They are expected to be called by administrative users only, but insufficiently restricted.
A non-administrative user may execute some configuration APIs.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Sharp | Sharp Digital Full-color MFPs and Monochrome MFPs | see the information provided by Sharp Corporation | — |
| Toshiba Tec | e-STUDIO 908 | T2.12.h3.00 and earlier versions | — |
| Toshiba Tec | e-STUDIO 1058 | T1.01.h4.00 and earlier versions | — |
| Toshiba Tec | e-STUDIO 1208 | T1.01.h4.00 and earlier versions | — |