# cve.now: Sharp Corporation

The newest entries naming Sharp Corporation as an affected vendor (up to 200), of 47 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-62416](https://cve.now/CVE-2026-62416.md): Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with the initial configuration, require no authentication (CVSS 5.3)
- [CVE-2026-63563](https://cve.now/CVE-2026-63563.md): Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication feature disabled in (CVSS 6.5)
- [CVE-2026-63545](https://cve.now/CVE-2026-63545.md): Sharp and Toshiba Tec MFPs (multifunction printers) caches data internally when printing, and leave them uncleared. (CVSS 2.4)
- [CVE-2026-60011](https://cve.now/CVE-2026-60011.md): Sharp and Toshiba Tec MFPs (multifunction printers) fail to properly authorize requests to directly access certain image data stored to the (CVSS 5.3)
- [CVE-2026-32326](https://cve.now/CVE-2026-32326.md): SHARP routers do not perform authentication for some web APIs. (CVSS 5.7)
- [CVE-2024-54082](https://cve.now/CVE-2024-54082.md): home 5G HR02 and Wi-Fi STATION SH-54C contain an OS command injection vulnerability in the configuration restore function. (CVSS 7.2)
- [CVE-2024-52321](https://cve.now/CVE-2024-52321.md): Multiple SHARP routers contain an improper authentication vulnerability in the configuration backup function. (CVSS 5.9)
- [CVE-2024-47864](https://cve.now/CVE-2024-47864.md): home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow vulnerability in the hidden debug function. (CVSS 5.3)
- [CVE-2024-46873](https://cve.now/CVE-2024-46873.md): Multiple SHARP routers leave the hidden debug function enabled. (CVSS 9.8)
- [CVE-2024-45721](https://cve.now/CVE-2024-45721.md): home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain an OS command injection vulnerability in the HOST name configuration sc (CVSS 7.2)
- [CVE-2024-36254](https://cve.now/CVE-2024-36254.md): Out-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple MFPs (multifunction printers), which may l (CVSS 7.5)
- [CVE-2024-36251](https://cve.now/CVE-2024-36251.md): The web interface of the affected devices process some crafted HTTP requests improperly, leading to a device crash. (CVSS 7.5)
- [CVE-2024-36249](https://cve.now/CVE-2024-36249.md): Cross-site scripting vulnerability exists in Sharp Corporation and Toshiba Tech Corporation multiple MFPs (multifunction printers). (CVSS 7.4)
- [CVE-2024-36248](https://cve.now/CVE-2024-36248.md): API keys for some cloud services are hardcoded in the "main" binary. (CVSS 9.1)
- [CVE-2024-35244](https://cve.now/CVE-2024-35244.md): There are several hidden accounts. (CVSS 9.1)
- [CVE-2024-34162](https://cve.now/CVE-2024-34162.md): The web interface of the affected devices is designed to hide the LDAP credentials even for administrative users. (CVSS 5.3)
- [CVE-2024-33616](https://cve.now/CVE-2024-33616.md): Admin authentication can be bypassed with some specific invalid credentials, which allows logging in with an administrative privilege. (CVSS 5.3)
- [CVE-2024-33610](https://cve.now/CVE-2024-33610.md): "sessionlist.html" and "sys\_trayentryreboot.html" are accessible with no authentication. (CVSS 9.1)
- [CVE-2024-33605](https://cve.now/CVE-2024-33605.md): Improper processing of some parameters of installed\_emanual\_list.html and installed\_emanual\_down.html leads to a path traversal… (CVSS 7.5)
- [CVE-2024-32151](https://cve.now/CVE-2024-32151.md): User passwords are decrypted and stored on memory before any user logged in. (CVSS 5.9)
- [CVE-2024-29978](https://cve.now/CVE-2024-29978.md): User passwords are decrypted and stored on memory before any user logged in. (CVSS 5.9)
- [CVE-2024-29146](https://cve.now/CVE-2024-29146.md): User passwords are decrypted and stored on memory before any user logged in. (CVSS 5.9)
- [CVE-2024-28955](https://cve.now/CVE-2024-28955.md): Affected devices create coredump files when crashed, storing them with world-readable permission. (CVSS 5.9)
- [CVE-2024-28038](https://cve.now/CVE-2024-28038.md): The web interface of the affected devices processes a cookie value improperly, leading to a stack buffer overflow. (CVSS 9.0)
- [CVE-2024-48870](https://cve.now/CVE-2024-48870.md): Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerability (CVSS 6.2)
- [CVE-2024-47801](https://cve.now/CVE-2024-47801.md): Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability (CVSS 7.4)
- [CVE-2024-47549](https://cve.now/CVE-2024-47549.md): Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP re (CVSS 7.4)
- [CVE-2024-47406](https://cve.now/CVE-2024-47406.md): Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability. (CVSS 9.1)
- [CVE-2024-47005](https://cve.now/CVE-2024-47005.md): Sharp and Toshiba Tec MFPs provide configuration related APIs. (CVSS 8.1)
- [CVE-2024-45842](https://cve.now/CVE-2024-45842.md): Sharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path Traversal vulnerability. (CVSS 5.3)
- [CVE-2024-45829](https://cve.now/CVE-2024-45829.md): Sharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are improperly processed and resul (CVSS 4.9)
- [CVE-2024-43424](https://cve.now/CVE-2024-43424.md): Sharp and Toshiba Tec MFPs improperly process HTTP request headers, resulting in an Out-of-bounds Read vulnerability. (CVSS 7.5)
- [CVE-2024-42420](https://cve.now/CVE-2024-42420.md): Sharp and Toshiba Tec MFPs contain multiple Out-of-bounds Read vulnerabilities, due to improper processing of keyword search input and impro (CVSS 7.5)
- [CVE-2024-23789](https://cve.now/CVE-2024-23789.md): Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacke (CVSS 9.8)
- [CVE-2024-23788](https://cve.now/CVE-2024-23788.md): Server-side request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allo (CVSS 9.1)
- [CVE-2024-23787](https://cve.now/CVE-2024-23787.md): Path traversal vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network- (CVSS 7.5)
- [CVE-2024-23786](https://cve.now/CVE-2024-23786.md): Cross-site scripting vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a ne (CVSS 9.3)
- [CVE-2024-23785](https://cve.now/CVE-2024-23785.md): Cross-site request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allow (CVSS 6.1)
- [CVE-2024-23784](https://cve.now/CVE-2024-23784.md): Improper access control vulnerability exists in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier, (CVSS 6.5)
- [CVE-2024-23783](https://cve.now/CVE-2024-23783.md): Improper authentication vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a (CVSS 8.8)
- [CVE-2022-45796](https://cve.now/CVE-2022-45796.md): SHARP Multifunction Printer - Command Injection (CVSS 9.1)
- [CVE-2020-5571](https://cve.now/CVE-2020-5571.md): SHARP AQUOS series (AQUOS SH-M02 build number 01.00.05 and earlier, AQUOS SH-RM02 build number 01.00.04 and earlier, AQUOS mini SH-M03 build (no CVSS)
- [CVE-2017-10890](https://cve.now/CVE-2017-10890.md): Session management issue in RX-V200 firmware versions prior to 09.87.17.09, RX-V100 firmware versions prior to 03.29.17.09, RX-CLV1-P firmwa (no CVSS)
- [CVE-2017-2192](https://cve.now/CVE-2017-2192.md): Untrusted search path vulnerability in RW-5100 tool to verify execution environment for Windows 7 version 1.1.0.0 and RW-5100 tool to verify (no CVSS)
- [CVE-2017-2191](https://cve.now/CVE-2017-2191.md): Untrusted search path vulnerability in RW-5100 driver installer for Windows 7 version 1.0.0.9 and RW-5100 driver installer for Windows 8.1 v (no CVSS)
- [CVE-2017-2190](https://cve.now/CVE-2017-2190.md): Untrusted search path vulnerability in RW-4040 tool to verify execution environment for Windows 7 version 1.2.0.0 allows an attacker to gain (no CVSS)
- [CVE-2017-2189](https://cve.now/CVE-2017-2189.md): Untrusted search path vulnerability in RW-4040 driver installer for Windows 7 version 2.27 allows an attacker to gain privileges via a Troja (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/sharp
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.