CVE-2024-47549 HIGH

CVE-2024-47549

Vendor Sharp Corporation
Product Sharp Digital Full-color MFPs and Monochrome MFPs
Weakness CWE-644
Published October 25, 2024
Last update October 25, 2024

CVSS base score

7.4/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

What the vulnerability does

01Description

Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP response headers. Accessing a crafted URL which points to an affected product may cause malicious script executed on the web browser.

Key dates

02Disclosure timeline

October 25, 2024 CVE published
October 25, 2024 Record updated