1. Home
  2. CVE Database
  3. CVE-2024-47549
HIGH · 7.4

CVE-2024-47549

Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP response headers. Accessing a crafted URL which points to an ...

Vulnerability Description

Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP response headers. Accessing a crafted URL which points to an affected product may cause malicious script executed on the web browser.

CVSS Score

7.4

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
ToshibatecE-Studio1058 Firmware<= t1.01.h4.00
ToshibatecE-Studio1058-
ToshibatecE-Studio1208 Firmware<= t1.01.h4.00
ToshibatecE-Studio1208-
ToshibatecE-Studio908 Firmware<= t2.12.h3.00
ToshibatecE-Studio908-
SharpBp-90C70 Firmware-
SharpBp-90C70-
SharpBp-90C80 Firmware-
SharpBp-90C80-
SharpBp-70C65 Firmware-
SharpBp-70C65-
SharpBp-70C55 Firmware-
SharpBp-70C55-
SharpBp-70C45 Firmware-
SharpBp-70C45-
SharpBp-70C36 Firmware-
SharpBp-70C36-
SharpBp-70C31 Firmware-
SharpBp-70C31-

Related Weaknesses (CWE)

CWE-116CWE-644

References

FAQ

What is CVE-2024-47549?

CVE-2024-47549 is a vulnerability with a CVSS score of 7.4 (HIGH). Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP response headers. Accessing a crafted URL which points to an ...

How severe is CVE-2024-47549?

CVE-2024-47549 has been rated HIGH with a CVSS base score of 7.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-47549?

Check the references section above for vendor advisories and patch information. Affected products include: Toshibatec E-Studio1058 Firmware, Toshibatec E-Studio1058, Toshibatec E-Studio1208 Firmware, Toshibatec E-Studio1208, Toshibatec E-Studio908 Firmware.