CVE-2024-45842 - CVE House
Back to Database
Status published Medium CVE-2024-45842

Sharp and Toshiba Tec MFPs improperly process URI data in...

Vulnerability Description

Sharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path Traversal vulnerability. Unintended internal files may be retrieved when processing crafted HTTP requests.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-45842

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Sharp Corporation

View all reports →

Affected Software

Sharp Digital Full-color MFPs and Monochrome MFPs, e-STUDIO 908, e-STUDIO 1058, e-STUDIO 1208
Vulnerable Versions:
see the information provided by Sharp Corporation, T2.12.h3.00 and earlier versions, T1.01.h4.00 and earlier versions

Timeline

Official Publish: October 25th, 2024
Last Modified: December 3rd, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weaknesses (CWE)