1. Home
  2. CVE Database
  3. CVE-2024-47801
HIGH · 7.4

CVE-2024-47801

Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability. Accessing a crafted URL which points to an affected produ...

Vulnerability Description

Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability. Accessing a crafted URL which points to an affected product may cause malicious script executed on the web browser.

CVSS Score

7.4

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
ToshibatecE-Studio1058 Firmware<= t1.01.h4.00
ToshibatecE-Studio1058-
ToshibatecE-Studio1208 Firmware<= t1.01.h4.00
ToshibatecE-Studio1208-
ToshibatecE-Studio908 Firmware<= t2.12.h3.00
ToshibatecE-Studio908-
SharpBp-90C70 Firmware-
SharpBp-90C70-
SharpBp-90C80 Firmware-
SharpBp-90C80-
SharpBp-70C65 Firmware-
SharpBp-70C65-
SharpBp-70C55 Firmware-
SharpBp-70C55-
SharpBp-70C45 Firmware-
SharpBp-70C45-
SharpBp-70C36 Firmware-
SharpBp-70C36-
SharpBp-70C31 Firmware-
SharpBp-70C31-

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2024-47801?

CVE-2024-47801 is a vulnerability with a CVSS score of 7.4 (HIGH). Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability. Accessing a crafted URL which points to an affected produ...

How severe is CVE-2024-47801?

CVE-2024-47801 has been rated HIGH with a CVSS base score of 7.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-47801?

Check the references section above for vendor advisories and patch information. Affected products include: Toshibatec E-Studio1058 Firmware, Toshibatec E-Studio1058, Toshibatec E-Studio1208 Firmware, Toshibatec E-Studio1208, Toshibatec E-Studio908 Firmware.