high8.1
CVE-2024-47005
Sharp and Toshiba Tec MFPs provide configuration related APIs.
Impact
Sharp and Toshiba Tec MFPs provide configuration related APIs. They are expected to be called by administrative users only, but insufficiently restricted. A non-administrative user may execute some configuration APIs.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Toshibatec | E-Studio1058 Firmware | through t1.01.h4.00 |
| Toshibatec | E-Studio1208 Firmware | through t1.01.h4.00 |
| Toshibatec | E-Studio908 Firmware | through t2.12.h3.00 |
| Sharp | Bp-90c70 Firmware | All versions |
| Sharp | Bp-90c80 Firmware | All versions |
| Sharp | Bp-70c65 Firmware | All versions |
| Sharp | Bp-70c55 Firmware | All versions |
| Sharp | Bp-70c45 Firmware | All versions |
| Sharp | Bp-70c36 Firmware | All versions |
| Sharp | Bp-70c31 Firmware | All versions |
| Sharp | Bp-60c45 Firmware | All versions |
| Sharp | Bp-60c36 Firmware | All versions |