Sharp Corporation vulnerabilities
47 vulnerabilities
Known vulnerabilities in Sharp Corporation products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 30 products.
Products
30- Multiple Mfps (Multifunction Printers)14 vulnerabilities
- Sharp Digital Full Color Mfps And Monochrome Mfps9 vulnerabilities
- Energy Management Controller With Cloud Services7 vulnerabilities
- Home 5G HR026 vulnerabilities
- Wi Fi Station SH 54C6 vulnerabilities
- Wi Fi Station SH 52B5 vulnerabilities
- Sharp Mfps3 vulnerabilities
- Pocketwifi 809Sh2 vulnerabilities
- Speed Wi Fi NEXT W072 vulnerabilities
- Wi Fi Station SH 05L2 vulnerabilities
- 5G Mobile Router SH U011 vulnerabilities
- Home 5G HR011 vulnerabilities
- Multiple Multifunction Printers1 vulnerabilities
- Network Scanner Tool (Bundled Software For Sharpdesk)1 vulnerabilities
- Network Scanner Tool Lite1 vulnerabilities
- Pocket Wifi 5G A503Sh1 vulnerabilities
- RW 4040 Driver Installer For Windows 71 vulnerabilities
- RW 4040 Tool To Verify Execution Environment For Windows 71 vulnerabilities
- RW 5100 Driver Installer For Windows 71 vulnerabilities
- RW 5100 Driver Installer For Windows 8.11 vulnerabilities
- RW 5100 Tool To Verify Execution Environment For Windows 71 vulnerabilities
- RW 5100 Tool To Verify Execution Environment For Windows 8.11 vulnerabilities
- RX CLV1 P1 vulnerabilities
- RX CLV2 B1 vulnerabilities
- RX CLV3 N1 vulnerabilities
- RX V1001 vulnerabilities
- RX V2001 vulnerabilities
- Sharp Aquos Series1 vulnerabilities
- Speed Wi Fi 5G X011 vulnerabilities
- Wi Fi Station SH 52A1 vulnerabilities
CVE-2020-5571sharp corporationsharp aquos series+10
EPSS score1.20%
SHARP AQUOS series (AQUOS SH-M02 build number 01.00.05 and earlier, AQUOS SH-RM02 build number 01.00.04 and earlier, AQUOS mini SH-M03 build number 01.00.04 and earlier, AQUOS Keitai SH-N01 build number 01.00.01 and earlier, AQUOS L2 (UQ mobile/J:COM) build number 01.00.05 and earlier, AQUOS sense lite SH-M05 build number 03.00.04 and earlier, AQUOS sense (UQ mobile) build number 03.00.03 and earlier, AQUOS compact SH-M06 build number 02.00.02 and earlier, AQUOS sense plus SH-M07 build number 02.00.02 and earlier, AQUOS sense2 SH-M08 build number 02.00.05 and earlier, and AQUOS sense2 (UQ mobile) build number 02.00.06 and earlier) allow an attacker to obtain the sensitive information of the device via malicious applications installed on the device.CVE-2017-2189sharp corporationrw-4040 driver installer for windows 7+1EPSS score1.15%
Untrusted search path vulnerability in RW-4040 driver installer for Windows 7 version 2.27 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.CVE-2017-2191sharp corporationrw-5100 driver installer for windows 7+3EPSS score1.06%
Untrusted search path vulnerability in RW-5100 driver installer for Windows 7 version 1.0.0.9 and RW-5100 driver installer for Windows 8.1 version 1.0.1.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.CVE-2017-2192sharp corporationrw-5100 tool to verify execution environment for windows 7+2EPSS score1.64%
Untrusted search path vulnerability in RW-5100 tool to verify execution environment for Windows 7 version 1.1.0.0 and RW-5100 tool to verify execution environment for Windows 8.1 version 1.2.0.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.CVE-2017-2190sharp corporationrw-4040 tool to verify execution environment for windows 7+1EPSS score1.64%
Untrusted search path vulnerability in RW-4040 tool to verify execution environment for Windows 7 version 1.2.0.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.CVE-2017-10890sharp corporationrx-clv1-p firmware+9EPSS score0.42%
Session management issue in RX-V200 firmware versions prior to 09.87.17.09, RX-V100 firmware versions prior to 03.29.17.09, RX-CLV1-P firmware versions prior to 79.17.17.09, RX-CLV2-B firmware versions prior to 89.07.17.09, RX-CLV3-N firmware versions prior to 91.09.17.10 allows an attacker on the same LAN to perform arbitrary operations or access information via unspecified vectors.CVE-2024-54082sharp corporationhome 5g hr02+1EPSS score1.20%
home 5G HR02 and Wi-Fi STATION SH-54C contain an OS command injection vulnerability in the configuration restore function. An arbitrary OS command may be executed with the root privilege by an administrative user.CVE-2024-52321sharp corporationhome 5g hr02+5EPSS score0.50%
Multiple SHARP routers contain an improper authentication vulnerability in the configuration backup function. The product's backup files containing sensitive information may be retrieved by a remote unauthenticated attacker.CVE-2024-47005sharp corporationsharp digital full-color mfps and monochrome mfps+323EPSS score0.46%
Sharp and Toshiba Tec MFPs provide configuration related APIs. They are expected to be called by administrative users only, but insufficiently restricted.
A non-administrative user may execute some configuration APIs.CVE-2024-47801sharp corporationsharp digital full-color mfps and monochrome mfps+323EPSS score0.36%
Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability.
Accessing a crafted URL which points to an affected product may cause malicious script executed on the web browser.CVE-2024-47549sharp corporationsharp digital full-color mfps and monochrome mfps+323EPSS score0.36%
Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP response headers.
Accessing a crafted URL which points to an affected product may cause malicious script executed on the web browser.CVE-2024-47406sharp corporationsharp digital full-color mfps and monochrome mfps+323EPSS score0.62%
Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability.CVE-2024-47864sharp corporationhome 5g hr02+2EPSS score0.58%
home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow vulnerability in the hidden debug function. A remote unauthenticated attacker may get the web console of the product down.CVE-2024-42420sharp corporationsharp digital full-color mfps and monochrome mfps+323EPSS score0.75%
Sharp and Toshiba Tec MFPs contain multiple Out-of-bounds Read vulnerabilities, due to improper processing of keyword search input and improper processing of SOAP messages.
Crafted HTTP requests may cause affected products crashed.CVE-2024-48870sharp corporationsharp digital full-color mfps and monochrome mfps+323EPSS score0.35%
Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerability.
If crafted input is stored by an administrative user, malicious script may be executed on the web browsers of other victim users.CVE-2024-36249sharp corporationmultiple mfps (multifunction printers)+1EPSS score0.53%
Cross-site scripting vulnerability exists in Sharp Corporation and Toshiba Tech Corporation multiple MFPs (multifunction printers). If this vulnerability is exploited, an arbitrary script may be executed on the administrative page of the affected MFPs. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].CVE-2024-36254sharp corporationmultiple mfps (multifunction printers)+1EPSS score0.72%
Out-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple MFPs (multifunction printers), which may lead to a denial-of-service (DoS) condition.CVE-2024-36248sharp corporationmultiple mfps (multifunction printers)+1EPSS score1.06%
API keys for some cloud services are hardcoded in the "main" binary. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].CVE-2024-36251sharp corporationmultiple mfps (multifunction printers)+1EPSS score3.50%
The web interface of the affected devices process some crafted HTTP requests improperly, leading to a device crash. More precisely, a crafted parameter to billcodedef_sub_sel.html is not processed properly and device-crash happens. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].CVE-2024-43424sharp corporationsharp digital full-color mfps and monochrome mfps+323EPSS score0.75%
Sharp and Toshiba Tec MFPs improperly process HTTP request headers, resulting in an Out-of-bounds Read vulnerability.
Crafted HTTP requests may cause affected products crashed.