high7.4
CVE-2024-47549
Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP response headers.
Impact
Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP response headers. Accessing a crafted URL which points to an affected product may cause malicious script executed on the web browser.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Toshibatec | E-Studio1058 Firmware | through t1.01.h4.00 |
| Toshibatec | E-Studio1208 Firmware | through t1.01.h4.00 |
| Toshibatec | E-Studio908 Firmware | through t2.12.h3.00 |
| Sharp | Bp-90c70 Firmware | All versions |
| Sharp | Bp-90c80 Firmware | All versions |
| Sharp | Bp-70c65 Firmware | All versions |
| Sharp | Bp-70c55 Firmware | All versions |
| Sharp | Bp-70c45 Firmware | All versions |
| Sharp | Bp-70c36 Firmware | All versions |
| Sharp | Bp-70c31 Firmware | All versions |
| Sharp | Bp-60c45 Firmware | All versions |
| Sharp | Bp-60c36 Firmware | All versions |