CVE-2024-47005CWE-749

Sharp and Toshiba Tec MFPs provide configuration related APIs

High · published October 25, 2024

CVSS v3.1
8.1
EPSS
0%
Percentile
39.2
In the wild
Unconfirmed
What it is

Sharp and Toshiba Tec MFPs provide configuration related APIs. They are expected to be called by administrative users only, but insufficiently restricted.

A non-administrative user may execute some configuration APIs.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00464 · 39.2th percentile
Weakness
CWE-749 · Exposed Dangerous Method or Function
Published
2024-10-25T06:18Z
EPSS history
Timeline
  • 25 OCT 06:18Z
    Sharp and Toshiba Tec MFPs provide configuration related APIs
    cvelistv5