CVSS 3.1
6.1 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NCVE-2024-47549
Medium (6.1) in sharp. EPSS 0.4% chance of exploitation in the next 30 days.
Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP response headers.
Accessing a crafted URL which points to an affected product may cause malicious script executed on the web browser.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 29% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-116, CWE-644
- Published
- Modified
- Record from
- the NVD, synced
Affected
- sharp:bp-30c25_firmware
- sharp:bp-30c25t_firmware
- sharp:bp-30c25y_firmware
- sharp:bp-30c25z_firmware
- sharp:bp-30m28_firmware
- sharp:bp-30m28t_firmware
- sharp:bp-30m31_firmware
- sharp:bp-30m31t_firmware
- sharp:bp-30m35_firmware
- sharp:bp-30m35t_firmware
- sharp:bp-50c26_firmware
- sharp:bp-50c31_firmware
- sharp:bp-50c36_firmware
- sharp:bp-50c45_firmware
- sharp:bp-50c55_firmware
- sharp:bp-50c65_firmware
- sharp:bp-50m26_firmware
- sharp:bp-50m31_firmware
- sharp:bp-50m36_firmware
- sharp:bp-50m45_firmware
- sharp:bp-50m50_firmware
- sharp:bp-50m55_firmware
- sharp:bp-55c26_firmware
- sharp:bp-60c31_firmware
- sharp:bp-60c36_firmware
- sharp:bp-60c45_firmware
- sharp:bp-70c31_firmware
- sharp:bp-70c36_firmware
- sharp:bp-70c45_firmware
- sharp:bp-70c55_firmware
- sharp:bp-70c65_firmware
- sharp:bp-70m31_firmware
- sharp:bp-70m36_firmware
- sharp:bp-70m45_firmware
- sharp:bp-70m55_firmware
- sharp:bp-70m65_firmware
- sharp:bp-70m75_firmware
- sharp:bp-70m90_firmware
- sharp:bp-90c70_firmware
- sharp:bp-90c80_firmware
- sharp:bp-b537wr_firmware
- sharp:bp-b540wr_firmware
- sharp:bp-b547wd_firmware
- sharp:bp-b550wd_firmware
- sharp:bp-c533wd_firmware
- sharp:bp-c533wr_firmware
- sharp:bp-c535wd_firmware
- sharp:bp-c535wr_firmware
- sharp:bp-c542wd_firmware
- sharp:bp-c545wd_firmware