Sharp Corporation vulnerabilities
47 CVEs and advisories name Sharp Corporation as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-62416Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with the initial configuration, require no authentication
- CVE-2026-63563Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication feature disabled in
- CVE-2026-63545Sharp and Toshiba Tec MFPs (multifunction printers) caches data internally when printing, and leave them uncleared.
- CVE-2026-60011Sharp and Toshiba Tec MFPs (multifunction printers) fail to properly authorize requests to directly access certain image data stored to the
- CVE-2026-32326SHARP routers do not perform authentication for some web APIs.
- CVE-2024-54082home 5G HR02 and Wi-Fi STATION SH-54C contain an OS command injection vulnerability in the configuration restore function.
- CVE-2024-52321Multiple SHARP routers contain an improper authentication vulnerability in the configuration backup function.
- CVE-2024-47864home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow vulnerability in the hidden debug function.
- CVE-2024-46873Multiple SHARP routers leave the hidden debug function enabled.
- CVE-2024-45721home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain an OS command injection vulnerability in the HOST name configuration sc
- CVE-2024-36254Out-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple MFPs (multifunction printers), which may l
- CVE-2024-36251The web interface of the affected devices process some crafted HTTP requests improperly, leading to a device crash.
- CVE-2024-36249Cross-site scripting vulnerability exists in Sharp Corporation and Toshiba Tech Corporation multiple MFPs (multifunction printers).
- CVE-2024-36248API keys for some cloud services are hardcoded in the "main" binary.
- CVE-2024-35244There are several hidden accounts.
- CVE-2024-34162The web interface of the affected devices is designed to hide the LDAP credentials even for administrative users.
- CVE-2024-33616Admin authentication can be bypassed with some specific invalid credentials, which allows logging in with an administrative privilege.
- CVE-2024-33610"sessionlist.html" and "sys_trayentryreboot.html" are accessible with no authentication.
- CVE-2024-33605Improper processing of some parameters of installed_emanual_list.html and installed_emanual_down.html leads to a path traversal…
- CVE-2024-32151User passwords are decrypted and stored on memory before any user logged in.
- CVE-2024-29978User passwords are decrypted and stored on memory before any user logged in.
- CVE-2024-29146User passwords are decrypted and stored on memory before any user logged in.
- CVE-2024-28955Affected devices create coredump files when crashed, storing them with world-readable permission.
- CVE-2024-28038The web interface of the affected devices processes a cookie value improperly, leading to a stack buffer overflow.
- CVE-2024-48870Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerability
- CVE-2024-47801Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability
- CVE-2024-47549Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP re
- CVE-2024-47406Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability.
- CVE-2024-47005Sharp and Toshiba Tec MFPs provide configuration related APIs.
- CVE-2024-45842Sharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path Traversal vulnerability.