Back to Database
Status published
Medium
CVE-2024-48870
Sharp and Toshiba Tec MFPs improperly validate input data in...
Vulnerability Description
Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerability. If crafted input is stored by an administrative user, malicious script may be executed on the web browsers of other victim users.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-48870
Credits & Attribution
No credits recorded in the NVD database.
References
More from Toshiba Tec Corporation
View All →CVE-2024-3498
Incorrect Permission Assignment Privilege Escalation Vulnerability
High
7.8
CVE-2024-3497
Directory Traversal Remote Code Execution Vulnerability
High
8.8
CVE-2024-3496
Authentication Bypass Vulnerability
High
8.8
CVE-2024-27180
TOCTOU vulnerability
Medium
6.7
CVE-2024-27179
Session disclosure inside the log files
Medium
4.7
Affected Vendor
Toshiba Tec Corporation
View all reports →Affected Software
e-STUDIO 908, e-STUDIO 1058, e-STUDIO 1208, Sharp Digital Full-color MFPs and Monochrome MFPs
Vulnerable Versions:
T2.12.h3.00 and earlier versions, T1.01.h4.00 and earlier versions, see the information provided by Sharp Corporation
Timeline
Official Publish:
October 25th, 2024
Last Modified:
October 25th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N