Approved changes feed: RSS · Atom

cpe:2.3:o:sharp:mx-m356uv_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorSharp (8ff31356-2c53-5c5d-9221-e83f6c803e0a)
ProductMx M356Uv Firmware (5a8a59a5-99f1-5fbd-9247-6a83ee5a4f37)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-48870 vulnerable 2026-06-08 06:50:11.125695 Details available
MEDIUM (6.2)
Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerability. If crafted input is stored by an administrative user, malicious script may be executed on the web browsers of other victim users.
Published: 2024-10-25T06:18:57.297Z
Updated: 2024-10-25T14:15:16.927Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47801 vulnerable 2026-06-08 06:48:13.212693 Details available
HIGH (7.4)
Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability. Accessing a crafted URL which points to an affected product may cause malicious script executed on the web browser.
Published: 2024-10-25T06:18:50.793Z
Updated: 2024-10-25T14:16:46.537Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47549 vulnerable 2026-06-08 06:48:12.594154 Details available
HIGH (7.4)
Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP response headers. Accessing a crafted URL which points to an affected product may cause malicious script executed on the web browser.
Published: 2024-10-25T06:18:42.287Z
Updated: 2024-10-25T18:32:25.798Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47406 vulnerable 2026-06-08 06:48:11.958766 Details available
CRITICAL (9.1)
Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability.
Published: 2024-10-25T06:18:36.274Z
Updated: 2024-10-25T18:38:24.503Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47005 vulnerable 2026-06-08 06:48:11.039343 Details available
HIGH (8.1)
Sharp and Toshiba Tec MFPs provide configuration related APIs. They are expected to be called by administrative users only, but insufficiently restricted. A non-administrative user may execute some configuration APIs.
Published: 2024-10-25T06:18:30.415Z
Updated: 2024-10-25T18:38:02.777Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45842 vulnerable 2026-06-08 06:48:09.737215 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45829 vulnerable 2026-06-08 06:48:09.509932 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43424 vulnerable 2026-06-08 06:45:51.255867 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42420 vulnerable 2026-06-08 06:43:57.093604 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.