CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2024-47406
Critical (9.8) in sharp. EPSS 0.6% chance of exploitation in the next 30 days.
Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-306, CWE-288
- Published
- Modified
- Record from
- the NVD, synced
Affected
- sharp:bp-30c25_firmware
- sharp:bp-30c25t_firmware
- sharp:bp-30c25y_firmware
- sharp:bp-30c25z_firmware
- sharp:bp-30m28_firmware
- sharp:bp-30m28t_firmware
- sharp:bp-30m31_firmware
- sharp:bp-30m31t_firmware
- sharp:bp-30m35_firmware
- sharp:bp-30m35t_firmware
- sharp:bp-50c26_firmware
- sharp:bp-50c31_firmware
- sharp:bp-50c36_firmware
- sharp:bp-50c45_firmware
- sharp:bp-50c55_firmware
- sharp:bp-50c65_firmware
- sharp:bp-50m26_firmware
- sharp:bp-50m31_firmware
- sharp:bp-50m36_firmware
- sharp:bp-50m45_firmware
- sharp:bp-50m50_firmware
- sharp:bp-50m55_firmware
- sharp:bp-55c26_firmware
- sharp:bp-60c31_firmware
- sharp:bp-60c36_firmware
- sharp:bp-60c45_firmware
- sharp:bp-70c31_firmware
- sharp:bp-70c36_firmware
- sharp:bp-70c45_firmware
- sharp:bp-70c55_firmware
- sharp:bp-70c65_firmware
- sharp:bp-70m31_firmware
- sharp:bp-70m36_firmware
- sharp:bp-70m45_firmware
- sharp:bp-70m55_firmware
- sharp:bp-70m65_firmware
- sharp:bp-70m75_firmware
- sharp:bp-70m90_firmware
- sharp:bp-90c70_firmware
- sharp:bp-90c80_firmware
- sharp:bp-b537wr_firmware
- sharp:bp-b540wr_firmware
- sharp:bp-b547wd_firmware
- sharp:bp-b550wd_firmware
- sharp:bp-c533wd_firmware
- sharp:bp-c533wr_firmware
- sharp:bp-c535wd_firmware
- sharp:bp-c535wr_firmware
- sharp:bp-c542wd_firmware
- sharp:bp-c545wd_firmware