Sharp Corporation vulnerabilities, page 3
47 vulnerabilities
Known vulnerabilities in Sharp Corporation products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 30 products.
CVE-2024-23788sharp corporationenergy management controller with cloud services+2
EPSS score0.81%
Server-side request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to send an arbitrary HTTP request (GET) from the affected product.CVE-2024-23783sharp corporationenergy management controller with cloud services+2EPSS score0.52%
Improper authentication vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to access the affected product without authentication.CVE-2026-63563sharp corporationsharp mfps+1EPSS score0.43%
Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication feature disabled in the initial configuration. When used with the initial configuration, the address book editing and a range of features related to Document Filing can be accessed without user authentication.
Products intended for the Japanese market are not affected.CVE-2026-63545sharp corporationsharp mfps+1EPSS score0.22%
Sharp and Toshiba Tec MFPs (multifunction printers) caches data internally when printing, and leave them uncleared. They may be accessed later by other users.CVE-2026-62416sharp corporationnetwork scanner tool (bundled software for sharpdesk)+1EPSS score0.64%
Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with the initial configuration, require no authentication and accept files unlimitedly. When the affected products are used with the initial configuration, anyone can connect to them without authentication and upload files unlimitedly. This may cause a denial-of-service (DoS) condition on the PC. Furthermore, if a malicious file is uploaded, a PC user may be tricked to execute the file to attack other entities from that PC.CVE-2026-32326sharp corporation5g mobile router sh-u01+7EPSS score0.30%
SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, the device may be taken over.CVE-2026-60011sharp corporationsharp mfps+1EPSS score0.40%
Sharp and Toshiba Tec MFPs (multifunction printers) fail to properly authorize requests to directly access certain image data stored to the affected product.