SC
Vendor
Sharp Corporation
66
CVEs
0
On KEV
1
New 30D
Products
MM7.5
Multiple Multifunction Printers
Sharp Corporation
1 CVEs0 on KEV1 new
MM9.1
Multiple MFPs (multifunction printers)
Sharp Corporation
14 CVEs0 on KEV0 new
SD9.8
Sharp Digital Full-color MFPs and Monochrome MFPs
Sharp Corporation
9 CVEs0 on KEV0 new
EM9.3
Energy Management Controller with Cloud Services
SHARP CORPORATION
7 CVEs0 on KEV0 new
H59.8
home 5G HR02
Sharp Corporation
6 CVEs0 on KEV0 new
WS9.8
Wi-Fi STATION SH-54C
Sharp Corporation
6 CVEs0 on KEV0 new
WS9.8
Wi-Fi STATION SH-52B
Sharp Corporation
5 CVEs0 on KEV0 new
SM6.5
Sharp MFPs
Sharp Corporation
3 CVEs0 on KEV0 new
P89.8
PocketWifi 809SH
Sharp Corporation
2 CVEs0 on KEV0 new
SW9.8
Speed Wi-Fi NEXT W07
Sharp Corporation
2 CVEs0 on KEV0 new
WS9.8
Wi-Fi STATION SH-05L
Sharp Corporation
2 CVEs0 on KEV0 new
5M5.7
5G Mobile Router SH-U01
Sharp Corporation
1 CVEs0 on KEV0 new
EM8.8
Energy Management Controller With Cloud Services (jh-rv11)
Sharp Corporation
1 CVEs0 on KEV0 new
EM8.8
Energy Management Controller With Cloud Services (jh-rvb1)
Sharp Corporation
1 CVEs0 on KEV0 new
H55.7
home 5G HR01
Sharp Corporation
1 CVEs0 on KEV0 new
NS5.3
Network Scanner Tool (Bundled software for Sharpdesk)
Sharp Corporation
1 CVEs0 on KEV0 new
NS5.3
Network Scanner Tool Lite
Sharp Corporation
1 CVEs0 on KEV0 new
PW5.7
Pocket WiFi 5G A503SH
Sharp Corporation
1 CVEs0 on KEV0 new
SW5.7
Speed Wi-Fi 5G X01
Sharp Corporation
1 CVEs0 on KEV0 new
WS5.7
Wi-Fi STATION SH-52A
Sharp Corporation
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-58388 | MM Multiple Multifunction Printers Sharp Corporation | 7.5 | Oct 1 | Sharp Multifunction Printers Local File Inclusion via installed_emanual_down.html |
| CVE-2026-62416 | NS Network Scanner Tool (Bundled software for Sharpdesk) Sharp Corporation | 5.3 | Aug 3 | Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with the initial configuration, require no authentication and accept files unlimitedly |
| CVE-2026-63563 | SM Sharp MFPs Sharp Corporation | 6.5 | Aug 3 | Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication feature disabled in the initial configuration |
| CVE-2026-63545 | SM Sharp MFPs Sharp Corporation | 2.4 | Aug 3 | Sharp and Toshiba Tec MFPs (multifunction printers) caches data internally when printing, and leave them uncleared |
| CVE-2026-60011 | SM Sharp MFPs Sharp Corporation | 5.3 | Aug 3 | Sharp and Toshiba Tec MFPs (multifunction printers) fail to properly authorize requests to directly access certain image data stored to the affected product |
| CVE-2026-32326 | 5M 5G Mobile Router SH-U01 Sharp Corporation | 5.7 | Mar 25 | SHARP routers do not perform authentication for some web APIs |
| CVE-2024-54082 | H5 home 5G HR02 Sharp Corporation | 7.2 | Dec 23 | home 5G HR02 and Wi-Fi STATION SH-54C contain an OS command injection vulnerability in the configuration restore function |
| CVE-2024-52321 | H5 home 5G HR02 Sharp Corporation | 5.9 | Dec 23 | Multiple SHARP routers contain an improper authentication vulnerability in the configuration backup function |
| CVE-2024-47864 | H5 home 5G HR02 Sharp Corporation | 5.3 | Dec 23 | home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow vulnerability in the hidden debug function |
| CVE-2024-46873 | WS Wi-Fi STATION SH-52B Sharp Corporation | 9.8 | Dec 23 | Multiple SHARP routers leave the hidden debug function enabled |
| CVE-2024-45721 | H5 home 5G HR02 Sharp Corporation | 7.2 | Dec 23 | home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain an OS command injection vulnerability in the HOST name configuration screen |
| CVE-2024-36254 | MM Multiple MFPs (multifunction printers) Sharp Corporation | 7.5 | Nov 26 | Out-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple MFPs (multifunction printers), which may lead to a denial-of-service (DoS)… |
| CVE-2024-36251 | MM Multiple MFPs (multifunction printers) Sharp Corporation | 7.5 | Nov 26 | The web interface of the affected devices process some crafted HTTP requests improperly, leading to a device crash |
| CVE-2024-36249 | MM Multiple MFPs (multifunction printers) Sharp Corporation | 7.4 | Nov 26 | Cross-site scripting vulnerability exists in Sharp Corporation and Toshiba Tech Corporation multiple MFPs (multifunction printers) |
| CVE-2024-36248 | MM Multiple MFPs (multifunction printers) Sharp Corporation | 9.1 | Nov 26 | API keys for some cloud services are hardcoded in the "main" binary |
| CVE-2024-35244 | MM Multiple MFPs (multifunction printers) Sharp Corporation | 9.1 | Nov 26 | There are several hidden accounts |
| CVE-2024-34162 | MM Multiple MFPs (multifunction printers) Sharp Corporation | 5.3 | Nov 26 | The web interface of the affected devices is designed to hide the LDAP credentials even for administrative users |
| CVE-2024-33616 | MM Multiple MFPs (multifunction printers) Sharp Corporation | 5.3 | Nov 26 | Admin authentication can be bypassed with some specific invalid credentials, which allows logging in with an administrative privilege |
| CVE-2024-33610 | MM Multiple MFPs (multifunction printers) Sharp Corporation | 9.1 | Nov 26 | "sessionlist.html" and "sys_trayentryreboot.html" are accessible with no authentication |
| CVE-2024-33605 | MM Multiple MFPs (multifunction printers) Sharp Corporation | 7.5 | Nov 26 | Improper processing of some parameters of installed_emanual_list.html leads to a path traversal vulnerability |
| CVE-2024-32151 | MM Multiple MFPs (multifunction printers) Sharp Corporation | 5.9 | Nov 26 | User passwords are decrypted and stored on memory before any user logged in |
| CVE-2024-29978 | MM Multiple MFPs (multifunction printers) Sharp Corporation | 5.9 | Nov 26 | User passwords are decrypted and stored on memory before any user logged in |
| CVE-2024-29146 | MM Multiple MFPs (multifunction printers) Sharp Corporation | 5.9 | Nov 26 | User passwords are decrypted and stored on memory before any user logged in |
| CVE-2024-28955 | MM Multiple MFPs (multifunction printers) Sharp Corporation | 5.9 | Nov 26 | Affected devices create coredump files when crashed, storing them with world-readable permission |
| CVE-2024-28038 | MM Multiple MFPs (multifunction printers) Sharp Corporation | 9.0 | Nov 26 | The web interface of the affected devices processes a cookie value improperly, leading to a stack buffer overflow |
| CVE-2024-48870 | SD Sharp Digital Full-color MFPs and Monochrome MFPs Sharp Corporation | 4.8 | Oct 25 | Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerability |
| CVE-2024-47801 | SD Sharp Digital Full-color MFPs and Monochrome MFPs Sharp Corporation | 6.1 | Oct 25 | Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability |
| CVE-2024-47549 | SD Sharp Digital Full-color MFPs and Monochrome MFPs Sharp Corporation | 6.1 | Oct 25 | Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP response headers |
| CVE-2024-47406 | SD Sharp Digital Full-color MFPs and Monochrome MFPs Sharp Corporation | 9.8 | Oct 25 | Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability |
| CVE-2024-47005 | SD Sharp Digital Full-color MFPs and Monochrome MFPs Sharp Corporation | 8.1 | Oct 25 | Sharp and Toshiba Tec MFPs provide configuration related APIs |
| CVE-2024-45842 | SD Sharp Digital Full-color MFPs and Monochrome MFPs Sharp Corporation | 5.3 | Oct 25 | Sharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path Traversal vulnerability |
| CVE-2024-45829 | SD Sharp Digital Full-color MFPs and Monochrome MFPs Sharp Corporation | 7.5 | Oct 25 | Sharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are improperly processed and resulting in an Out-of-bounds Read… |
| CVE-2024-43424 | SD Sharp Digital Full-color MFPs and Monochrome MFPs Sharp Corporation | 7.5 | Oct 25 | Sharp and Toshiba Tec MFPs improperly process HTTP request headers, resulting in an Out-of-bounds Read vulnerability |
| CVE-2024-42420 | SD Sharp Digital Full-color MFPs and Monochrome MFPs Sharp Corporation | 7.5 | Oct 25 | Sharp and Toshiba Tec MFPs contain multiple Out-of-bounds Read vulnerabilities, due to improper processing of keyword search input and improper processing of SOAP messages |
| CVE-2024-23789 | EM Energy Management Controller with Cloud Services SHARP CORPORATION | 8.8 | Feb 14 | Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command on… |
| CVE-2024-23788 | EM Energy Management Controller with Cloud Services SHARP CORPORATION | 8.1 | Feb 14 | Server-side request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated… |
| CVE-2024-23787 | EM Energy Management Controller with Cloud Services SHARP CORPORATION | 6.5 | Feb 14 | Path traversal vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to… |
| CVE-2024-23786 | EM Energy Management Controller with Cloud Services SHARP CORPORATION | 9.3 | Feb 14 | Cross-site scripting vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker… |
| CVE-2024-23785 | EM Energy Management Controller with Cloud Services SHARP CORPORATION | 6.5 | Feb 14 | Cross-site request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a remote unauthenticated attacker to… |
| CVE-2024-23784 | EM Energy Management Controller with Cloud Services SHARP CORPORATION | 6.5 | Feb 14 | Improper access control vulnerability exists in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier, which may allow a network-adjacent… |
| CVE-2024-23783 | EM Energy Management Controller with Cloud Services SHARP CORPORATION | 8.8 | Feb 14 | Improper authentication vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated… |
