SC
Vendor
Sharp Corporation
20 products with CVEs on record
66
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2024-58388
MM
Multiple Multifunction Printers
Sharp Corporation
7.5
1%
Oct 1Sharp Multifunction Printers Local File Inclusion via installed_emanual_down.html
CVE-2026-62416
NS
Network Scanner Tool (Bundled software for Sharpdesk)
Sharp Corporation
5.3
1%
Aug 3Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with the initial configuration, require no authentication and accept files unlimitedly
CVE-2026-63563
SM
Sharp MFPs
Sharp Corporation
6.5
0%
Aug 3Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication feature disabled in the initial configuration
CVE-2026-63545
SM
Sharp MFPs
Sharp Corporation
2.4
0%
Aug 3Sharp and Toshiba Tec MFPs (multifunction printers) caches data internally when printing, and leave them uncleared
CVE-2026-60011
SM
Sharp MFPs
Sharp Corporation
5.3
0%
Aug 3Sharp and Toshiba Tec MFPs (multifunction printers) fail to properly authorize requests to directly access certain image data stored to the affected product
CVE-2026-32326
5M
5G Mobile Router SH-U01
Sharp Corporation
5.7
0%
Mar 25SHARP routers do not perform authentication for some web APIs
CVE-2024-54082
H5
home 5G HR02
Sharp Corporation
7.2
1%
Dec 23home 5G HR02 and Wi-Fi STATION SH-54C contain an OS command injection vulnerability in the configuration restore function
CVE-2024-52321
H5
home 5G HR02
Sharp Corporation
5.9
1%
Dec 23Multiple SHARP routers contain an improper authentication vulnerability in the configuration backup function
CVE-2024-47864
H5
home 5G HR02
Sharp Corporation
5.3
1%
Dec 23home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow vulnerability in the hidden debug function
CVE-2024-46873
WS
Wi-Fi STATION SH-52B
Sharp Corporation
9.8
1%
Dec 23Multiple SHARP routers leave the hidden debug function enabled
CVE-2024-45721
H5
home 5G HR02
Sharp Corporation
7.2
1%
Dec 23home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain an OS command injection vulnerability in the HOST name configuration screen
CVE-2024-36254
MM
Multiple MFPs (multifunction printers)
Sharp Corporation
7.5
1%
Nov 26Out-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple MFPs (multifunction printers), which may lead to a denial-of-service (DoS)…
CVE-2024-36251
MM
Multiple MFPs (multifunction printers)
Sharp Corporation
7.5
3%
Nov 26The web interface of the affected devices process some crafted HTTP requests improperly, leading to a device crash
CVE-2024-36249
MM
Multiple MFPs (multifunction printers)
Sharp Corporation
7.4
1%
Nov 26Cross-site scripting vulnerability exists in Sharp Corporation and Toshiba Tech Corporation multiple MFPs (multifunction printers)
CVE-2024-36248
MM
Multiple MFPs (multifunction printers)
Sharp Corporation
9.1
1%
Nov 26API keys for some cloud services are hardcoded in the "main" binary
CVE-2024-35244
MM
Multiple MFPs (multifunction printers)
Sharp Corporation
9.1
1%
Nov 26There are several hidden accounts
CVE-2024-34162
MM
Multiple MFPs (multifunction printers)
Sharp Corporation
5.3
1%
Nov 26The web interface of the affected devices is designed to hide the LDAP credentials even for administrative users
CVE-2024-33616
MM
Multiple MFPs (multifunction printers)
Sharp Corporation
5.3
1%
Nov 26Admin authentication can be bypassed with some specific invalid credentials, which allows logging in with an administrative privilege
CVE-2024-33610
MM
Multiple MFPs (multifunction printers)
Sharp Corporation
9.1
50%
Nov 26"sessionlist.html" and "sys_trayentryreboot.html" are accessible with no authentication
CVE-2024-33605
MM
Multiple MFPs (multifunction printers)
Sharp Corporation
7.5
6%
Nov 26Improper processing of some parameters of installed_emanual_list.html leads to a path traversal vulnerability
CVE-2024-32151
MM
Multiple MFPs (multifunction printers)
Sharp Corporation
5.9
1%
Nov 26User passwords are decrypted and stored on memory before any user logged in
CVE-2024-29978
MM
Multiple MFPs (multifunction printers)
Sharp Corporation
5.9
1%
Nov 26User passwords are decrypted and stored on memory before any user logged in
CVE-2024-29146
MM
Multiple MFPs (multifunction printers)
Sharp Corporation
5.9
1%
Nov 26User passwords are decrypted and stored on memory before any user logged in
CVE-2024-28955
MM
Multiple MFPs (multifunction printers)
Sharp Corporation
5.9
1%
Nov 26Affected devices create coredump files when crashed, storing them with world-readable permission
CVE-2024-28038
MM
Multiple MFPs (multifunction printers)
Sharp Corporation
9.0
3%
Nov 26The web interface of the affected devices processes a cookie value improperly, leading to a stack buffer overflow
CVE-2024-48870
SD
Sharp Digital Full-color MFPs and Monochrome MFPs
Sharp Corporation
4.8
0%
Oct 25Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerability
CVE-2024-47801
SD
Sharp Digital Full-color MFPs and Monochrome MFPs
Sharp Corporation
6.1
0%
Oct 25Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability
CVE-2024-47549
SD
Sharp Digital Full-color MFPs and Monochrome MFPs
Sharp Corporation
6.1
0%
Oct 25Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP response headers
CVE-2024-47406
SD
Sharp Digital Full-color MFPs and Monochrome MFPs
Sharp Corporation
9.8
1%
Oct 25Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability
CVE-2024-47005
SD
Sharp Digital Full-color MFPs and Monochrome MFPs
Sharp Corporation
8.1
0%
Oct 25Sharp and Toshiba Tec MFPs provide configuration related APIs
CVE-2024-45842
SD
Sharp Digital Full-color MFPs and Monochrome MFPs
Sharp Corporation
5.3
1%
Oct 25Sharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path Traversal vulnerability
CVE-2024-45829
SD
Sharp Digital Full-color MFPs and Monochrome MFPs
Sharp Corporation
7.5
1%
Oct 25Sharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are improperly processed and resulting in an Out-of-bounds Read…
CVE-2024-43424
SD
Sharp Digital Full-color MFPs and Monochrome MFPs
Sharp Corporation
7.5
1%
Oct 25Sharp and Toshiba Tec MFPs improperly process HTTP request headers, resulting in an Out-of-bounds Read vulnerability
CVE-2024-42420
SD
Sharp Digital Full-color MFPs and Monochrome MFPs
Sharp Corporation
7.5
1%
Oct 25Sharp and Toshiba Tec MFPs contain multiple Out-of-bounds Read vulnerabilities, due to improper processing of keyword search input and improper processing of SOAP messages
CVE-2024-23789
EM
Energy Management Controller with Cloud Services
SHARP CORPORATION
8.8
1%
Feb 14Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command on…
CVE-2024-23788
EM
Energy Management Controller with Cloud Services
SHARP CORPORATION
8.1
1%
Feb 14Server-side request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated…
CVE-2024-23787
EM
Energy Management Controller with Cloud Services
SHARP CORPORATION
6.5
1%
Feb 14Path traversal vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to…
CVE-2024-23786
EM
Energy Management Controller with Cloud Services
SHARP CORPORATION
9.3
1%
Feb 14Cross-site scripting vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker…
CVE-2024-23785
EM
Energy Management Controller with Cloud Services
SHARP CORPORATION
6.5
0%
Feb 14Cross-site request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a remote unauthenticated attacker to…
CVE-2024-23784
EM
Energy Management Controller with Cloud Services
SHARP CORPORATION
6.5
0%
Feb 14Improper access control vulnerability exists in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier, which may allow a network-adjacent…
CVE-2024-23783
EM
Energy Management Controller with Cloud Services
SHARP CORPORATION
8.8
1%
Feb 14Improper authentication vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated…