Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerability
Published Oct 25, 2024
6.2
MEDIUMCVSS 3.1
EPSS 0.35%
Description
Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerability. If crafted input is stored by an administrative user, malicious script may be executed on the web browsers of other victim users.
Affected products
-
- Version see the information provided by Sharp CorporationStatusaffectedConstraints-
- Version
-
- Version T1.01.h4.00 and earlier versionsStatusaffectedConstraints-
- Version
-
- Version T1.01.h4.00 and earlier versionsStatusaffectedConstraints-
- Version
-
- Version T2.12.h3.00 and earlier versionsStatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Sharp Corporation | Sharp Digital Full-color MFPs and Monochrome MFPs | n/a |
| ||||||
| Toshiba Tec Corporation | e-STUDIO 1058 | n/a |
| ||||||
| Toshiba Tec Corporation | e-STUDIO 1208 | n/a |
| ||||||
| Toshiba Tec Corporation | e-STUDIO 908 | n/a |
|
Configuration 1
- ≤ t1.01.h4.00
Running on/with
- n/a
Configuration 2
- ≤ t1.01.h4.00
Running on/with
- n/a
Configuration 3
- ≤ t2.12.h3.00
Running on/with
- n/a
Configuration 4
- n/a
Configuration 5
- n/a
Configuration 6
- n/a
Configuration 7
- n/a
Configuration 8
- n/a
Configuration 9
- n/a
Configuration 10
- n/a
Configuration 11
- n/a
Configuration 12
- n/a
Configuration 13
- n/a
Configuration 14
- n/a
Configuration 15
- n/a
Configuration 16
- n/a
Configuration 17
- n/a
Configuration 18
- n/a
Configuration 19
- n/a
Configuration 20
- n/a
Configuration 21
- n/a
Configuration 22
- n/a
Configuration 23
- n/a
Configuration 24
- n/a
Configuration 25
- n/a
Configuration 26
- n/a
Configuration 27
- n/a
Configuration 28
- n/a
Configuration 29
- n/a
Configuration 30
- n/a
Configuration 31
- n/a
Configuration 32
- n/a
Configuration 33
- n/a
Configuration 34
- n/a
Configuration 35
- n/a
Configuration 36
- n/a
Configuration 37
- n/a
Configuration 38
- n/a
Configuration 39
- n/a
Configuration 40
- n/a
Configuration 41
- n/a
Configuration 42
- n/a
Configuration 43
- n/a
Configuration 44
- n/a
Configuration 45
- n/a
Configuration 46
- n/a
Configuration 47
- n/a
Configuration 48
- n/a
Configuration 49
- n/a
Configuration 50
- n/a
Configuration 51
- n/a
Configuration 52
- n/a
Configuration 53
- n/a
Configuration 54
- n/a
Configuration 55
- n/a
Configuration 56
- n/a
Configuration 57
- n/a
Configuration 58
- n/a
Configuration 59
- n/a
Configuration 60
- n/a
Configuration 61
- n/a
Configuration 62
- n/a
Configuration 63
- n/a
Configuration 64
- n/a
Configuration 65
- n/a
Configuration 66
- n/a
Configuration 67
- n/a
Configuration 68
- n/a
Configuration 69
- n/a
Running on/with
- n/a
Configuration 70
- n/a
Running on/with
- n/a
Configuration 71
- n/a
Running on/with
- n/a
Configuration 72
- n/a
Running on/with
- n/a
Configuration 73
- n/a
Running on/with
- n/a
Configuration 74
- n/a
Running on/with
- n/a
Configuration 75
- n/a
Configuration 76
- n/a
Configuration 77
- n/a
Configuration 78
- n/a
Configuration 79
- n/a
Configuration 80
- n/a
Configuration 81
- n/a
Configuration 82
- n/a
Configuration 83
- n/a
Configuration 84
- n/a
Configuration 85
- n/a
Configuration 86
- n/a
Running on/with
- n/a
Configuration 87
- n/a
Running on/with
- n/a
Configuration 88
- n/a
Configuration 89
- n/a
Configuration 90
- n/a
Configuration 91
- n/a
Configuration 92
- n/a
Configuration 93
- n/a
Configuration 94
- n/a
Configuration 95
- n/a
Configuration 96
- n/a
Configuration 97
- n/a
Configuration 98
- n/a
Configuration 99
- n/a
Configuration 100
- n/a
Configuration 101
- n/a
Configuration 102
- n/a
Configuration 103
- n/a
Configuration 104
- n/a
Configuration 105
- n/a
Configuration 106
- n/a
Configuration 107
- n/a
Configuration 108
- n/a
Configuration 109
- n/a
Configuration 110
- n/a
Configuration 111
- n/a
Configuration 112
- n/a
Configuration 113
- n/a
Configuration 114
- n/a
Configuration 115
- n/a
Configuration 116
- n/a
Configuration 117
- n/a
Configuration 118
- n/a
Configuration 119
- n/a
Configuration 120
- n/a
Configuration 121
- n/a
Configuration 122
- n/a
Configuration 123
- n/a
Configuration 124
- n/a
Configuration 125
- n/a
Configuration 126
- n/a
Configuration 127
- n/a
Configuration 128
- n/a
Configuration 129
- n/a
Configuration 130
- n/a
Configuration 131
- n/a
Configuration 132
- n/a
Configuration 133
- n/a
Configuration 134
- n/a
Configuration 135
- n/a
Configuration 136
- n/a
Configuration 137
- n/a
Configuration 138
- n/a
Configuration 139
- n/a
Configuration 140
- n/a
Configuration 141
- n/a
Configuration 142
- n/a
Configuration 143
- n/a
Configuration 144
- n/a
Configuration 145
- n/a
Configuration 146
- n/a
Configuration 147
- n/a
Configuration 148
- n/a
Configuration 149
- n/a
Configuration 150
- n/a
Configuration 151
- n/a
Configuration 152
- n/a
Configuration 153
- n/a
Configuration 154
- n/a
Configuration 155
- n/a
Configuration 156
- n/a
Configuration 157
- n/a
Configuration 158
- n/a
Configuration 159
- n/a
Running on/with
- n/a
Configuration 160
- n/a
Running on/with
- n/a
Configuration 161
- n/a
Running on/with
- n/a
Configuration 162
- n/a
Running on/with
- n/a
Configuration 163
- n/a
Running on/with
- n/a
Configuration 164
- n/a
Configuration 165
- n/a
Configuration 166
- n/a
Configuration 167
- n/a
Configuration 168
- n/a
Configuration 169
- n/a
Configuration 170
- n/a
Configuration 171
- n/a
Configuration 172
- n/a
Configuration 173
- n/a
Configuration 174
- n/a
Configuration 175
- n/a
Configuration 176
- n/a
Configuration 177
- n/a
Configuration 178
- n/a
Configuration 179
- n/a
Configuration 180
- n/a
Configuration 181
- n/a
Configuration 182
- n/a
Running on/with
- n/a
Configuration 183
- n/a
Running on/with
- n/a
Configuration 184
- n/a
Configuration 185
- n/a
Configuration 186
- n/a
Configuration 187
- n/a
Running on/with
- n/a
Configuration 188
- n/a
Configuration 189
- n/a
Configuration 190
- n/a
Configuration 191
- n/a
Configuration 192
- n/a
Configuration 193
- n/a
Configuration 194
- n/a
Configuration 195
- n/a
Configuration 196
- n/a
Configuration 197
- n/a
Configuration 198
- n/a
Configuration 199
- n/a
Configuration 200
- n/a
Configuration 201
- n/a
Configuration 202
- n/a
Configuration 203
- n/a
Configuration 204
- n/a
Configuration 205
- n/a
Running on/with
- n/a
Configuration 206
- n/a
Configuration 207
- n/a
Configuration 208
- n/a
Configuration 209
- n/a
Configuration 210
- n/a
Configuration 211
- n/a
Configuration 212
- n/a
Configuration 213
- n/a
Configuration 214
- n/a
Configuration 215
- n/a
Configuration 216
- n/a
Configuration 217
- n/a
Configuration 218
- n/a
Configuration 219
- n/a
Configuration 220
- n/a
Configuration 221
- n/a
Configuration 222
- n/a
Configuration 223
- n/a
Configuration 224
- n/a
Configuration 225
- n/a
Configuration 226
- n/a
Configuration 227
- n/a
Configuration 228
- n/a
Configuration 229
- n/a
Configuration 230
- n/a
Configuration 231
- n/a
Configuration 232
- n/a
Configuration 233
- n/a
Configuration 234
- n/a
Configuration 235
- n/a
Configuration 236
- n/a
Configuration 237
- n/a
Running on/with
- n/a
Configuration 238
- n/a
Configuration 239
- n/a
Configuration 240
- n/a
Configuration 241
- n/a
Configuration 242
- n/a
Configuration 243
- n/a
Configuration 244
- n/a
Configuration 245
- n/a
Configuration 246
- n/a
Configuration 247
- n/a
Configuration 248
- n/a
Configuration 249
- n/a
Configuration 250
- n/a
Configuration 251
- n/a
Configuration 252
- n/a
Configuration 253
- n/a
Configuration 254
- n/a
Configuration 255
- n/a
Configuration 256
- n/a
Configuration 257
- n/a
Configuration 258
- n/a
Running on/with
- n/a
Configuration 259
- n/a
Running on/with
- n/a
Configuration 260
- n/a
Configuration 261
- n/a
Configuration 262
- n/a
Configuration 263
- n/a
Running on/with
- n/a
Configuration 264
- n/a
Running on/with
- n/a
Configuration 265
- n/a
Configuration 266
- n/a
Configuration 267
- n/a
Configuration 268
- n/a
Running on/with
- n/a
Configuration 269
- n/a
Configuration 270
- n/a
Configuration 271
- n/a
Configuration 272
- n/a
Configuration 273
- n/a
Configuration 274
- n/a
Configuration 275
- n/a
Configuration 276
- n/a
Configuration 277
- n/a
Configuration 278
- n/a
Configuration 279
- n/a
Configuration 280
- n/a
Configuration 281
- n/a
Configuration 282
- n/a
Configuration 283
- n/a
Configuration 284
- n/a
Configuration 285
- n/a
Configuration 286
- n/a
Configuration 287
- n/a
Configuration 288
- n/a
Configuration 289
- n/a
Configuration 290
- n/a
Configuration 291
- n/a
Configuration 292
- n/a
Configuration 293
- n/a
Configuration 294
- n/a
Configuration 295
- n/a
Configuration 296
- n/a
Configuration 297
- n/a
Configuration 298
- n/a
Configuration 299
- n/a
Configuration 300
- n/a
Configuration 301
- n/a
Configuration 302
- n/a
Configuration 303
- n/a
Configuration 304
- n/a
Configuration 305
- n/a
Configuration 306
- n/a
Configuration 307
- n/a
Configuration 308
- n/a
Configuration 309
- n/a
Configuration 310
- n/a
Configuration 311
- n/a
Configuration 312
- n/a
Configuration 313
- n/a
Configuration 314
- n/a
Configuration 315
- n/a
Configuration 316
- n/a
Configuration 317
- n/a
Configuration 318
- n/a
Configuration 319
- n/a
Configuration 320
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (4)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-43124 Advisory
- https://global.sharp/products/copier/info/info_security_2024-10.html Vendor Advisory
- https://jvn.jp/en/vu/JVNVU95063136/ Third Party Advisory
- https://www.toshibatec.com/information/20241025_01.html Vendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-43124 | Advisory | |
| https://global.sharp/products/copier/info/info_security_2024-10.html | Vendor Advisory | |
| https://jvn.jp/en/vu/JVNVU95063136/ | Third Party Advisory | |
| https://www.toshibatec.com/information/20241025_01.html | Vendor Advisory |
Change history (0)
No recorded changes yet.