CVE-2024-47406

high-risk

Published 2024-10-25

Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability.

Do I need to act?

0.32% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 9.1/10 Critical

NETWORK / LOW complexity

E-Studio1058 Firmware

E-Studio1208 Firmware

E-Studio908 Firmware

Bp-90C70 Firmware

Bp-90C80 Firmware

Bp-70C65 Firmware

Bp-70C55 Firmware

Bp-70C45 Firmware

Bp-70C36 Firmware

Bp-70C31 Firmware

Bp-60C45 Firmware

Bp-60C36 Firmware

Bp-60C31 Firmware

Bp-50C65 Firmware

Bp-50C55 Firmware

Bp-50C45 Firmware

Bp-50C36 Firmware

Bp-50C31 Firmware

Bp-50C26 Firmware

Bp-55C26 Firmware

Sharp Toshibatec

Vendor Advisory https://global.sharp/products/copier/info/info_security_2024-10.html

Third Party Advisory https://jvn.jp/en/vu/JVNVU95063136/

Vendor Advisory https://www.toshibatec.com/information/20241025_01.html

/ 100

high-risk

Severity 31/34 · Critical

Exploitability 1/34 · Minimal

Exposure 33/34 · Critical