Sharp MFPs vulnerable to cross-site scripting attack
CVE-2024-48870
Key Information:
- Vendor
Toshiba
- Vendor
- CVE Published:
- 25 October 2024
What is CVE-2024-48870?
Sharp and Toshiba Tec multi-function printers exhibit a vulnerability related to improper input data validation during URI data registration. This flaw allows an attacker, via crafted input, to store malicious scripts that may be executed in the web browsers of users accessing the affected system. If administrative users inadvertently store such input, it can lead to significant security risks for organizations, compromising user safety and exposing sensitive information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
e-STUDIO 1058 T1.01.h4.00 and earlier versions
e-STUDIO 1208 T1.01.h4.00 and earlier versions
e-STUDIO 908 T2.12.h3.00 and earlier versions
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved