Skip to content
OpenAdvisories
Critical · 9.1 CVE-2024-47406 EUVD-2024-42435GHSA-vwp4-85g8-fgjg

Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability.

Published Oct 25, 2024 · Updated Oct 25, 2024 · Assigned by jpcert

Vendor: Sharp Vendor: Toshiba Tec Product: e-STUDIO 1058 Product: e-STUDIO 1208 Product: e-STUDIO 908 Product: Sharp Digital Full-color MFPs and Monochrome MFPs

Description

Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability.

Affected products

VendorProductAffectedFixed
Sharp Sharp Digital Full-color MFPs and Monochrome MFPs see the information provided by Sharp Corporation —
Toshiba Tec e-STUDIO 908 T2.12.h3.00 and earlier versions —
Toshiba Tec e-STUDIO 1058 T1.01.h4.00 and earlier versions —
Toshiba Tec e-STUDIO 1208 T1.01.h4.00 and earlier versions —

References