medium5.3
CVE-2024-45842
Sharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path Traversal vulnerability.
Impact
Sharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path Traversal vulnerability. Unintended internal files may be retrieved when processing crafted HTTP requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Toshibatec | E-Studio1058 Firmware | through t1.01.h4.00 |
| Toshibatec | E-Studio1208 Firmware | through t1.01.h4.00 |
| Toshibatec | E-Studio908 Firmware | through t2.12.h3.00 |
| Sharp | Bp-90c70 Firmware | All versions |
| Sharp | Bp-90c80 Firmware | All versions |
| Sharp | Bp-70c65 Firmware | All versions |
| Sharp | Bp-70c55 Firmware | All versions |
| Sharp | Bp-70c45 Firmware | All versions |
| Sharp | Bp-70c36 Firmware | All versions |
| Sharp | Bp-70c31 Firmware | All versions |
| Sharp | Bp-60c45 Firmware | All versions |
| Sharp | Bp-60c36 Firmware | All versions |