CVE-2024-36249

State: Published
Severity: 7.4 High
Published: Nov 26, 2024
Updated: Nov 26, 2024
Reserved: May 22, 2024

Description

Cross-site scripting vulnerability exists in Sharp Corporation and Toshiba Tech Corporation multiple MFPs (multifunction printers). If this vulnerability is exploited, an arbitrary script may be executed on the administrative page of the affected MFPs. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

Scores

CVSS	Score	Vector	Source
3.1	7.4 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N	jpcert

Weaknesses

CWE-79 Cross-site scripting (XSS)

Affected Products

Product	Versions
Multiple MFPs (multifunction printers)Sharp Corporation	See the information provided by Sharp Corporation listed under [References]Affected
Multiple MFPs (multifunction printers)Toshiba Tec Corporation	See the information provided by Toshiba Tec Corporation listed under [References]Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.