CVE-2024-47005

Description

Sharp and Toshiba Tec MFPs provide configuration related APIs. They are expected to be called by administrative users only, but insufficiently restricted. A non-administrative user may execute some configuration APIs.

Reserved 2024-10-16 | Published 2024-10-25 | Updated 2024-10-25 | Assigner jpcert

Problem types

Exposed dangerous method or function

Product status

see the information provided by Sharp Corporation
affected

T2.12.h3.00 and earlier versions
affected

T1.01.h4.00 and earlier versions
affected

T1.01.h4.00 and earlier versions
affected

References

jvn.jp/en/vu/JVNVU95063136/

global.sharp/products/copier/info/info_security_2024-10.html

www.toshibatec.com/information/20241025_01.html

cve.org (CVE-2024-47005)

nvd.nist.gov (CVE-2024-47005)

Download JSON