medium4.9
CVE-2024-45829
Sharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are improperly processed and resulting in an Out-of-b…
Impact
Sharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are improperly processed and resulting in an Out-of-bounds Read vulnerability. Crafted HTTP requests may cause affected products crashed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Toshibatec | E-Studio1058 Firmware | through t1.01.h4.00 |
| Toshibatec | E-Studio1208 Firmware | through t1.01.h4.00 |
| Toshibatec | E-Studio908 Firmware | through t2.12.h3.00 |
| Sharp | Bp-90c70 Firmware | All versions |
| Sharp | Bp-90c80 Firmware | All versions |
| Sharp | Bp-70c65 Firmware | All versions |
| Sharp | Bp-70c55 Firmware | All versions |
| Sharp | Bp-70c45 Firmware | All versions |
| Sharp | Bp-70c36 Firmware | All versions |
| Sharp | Bp-70c31 Firmware | All versions |
| Sharp | Bp-60c45 Firmware | All versions |
| Sharp | Bp-60c36 Firmware | All versions |