Approved changes feed: RSS · Atom

cpe:2.3:o:toshibatec:e-studio1208_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorToshibatec (209a1c14-0b18-56cc-8adf-e4ddcf5085f0)
ProductE Studio1208 Firmware (ee46d47e-f15a-55ac-83bb-b67b15f05c76)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-48870 vulnerable 2026-06-08 06:50:10.480862 Details available
MEDIUM (6.2)
Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerability. If crafted input is stored by an administrative user, malicious script may be executed on the web browsers of other victim users.
Published: 2024-10-25T06:18:57.297Z
Updated: 2024-10-25T14:15:16.927Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47801 vulnerable 2026-06-08 06:48:13.182166 Details available
HIGH (7.4)
Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability. Accessing a crafted URL which points to an affected product may cause malicious script executed on the web browser.
Published: 2024-10-25T06:18:50.793Z
Updated: 2024-10-25T14:16:46.537Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47549 vulnerable 2026-06-08 06:48:12.556315 Details available
HIGH (7.4)
Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP response headers. Accessing a crafted URL which points to an affected product may cause malicious script executed on the web browser.
Published: 2024-10-25T06:18:42.287Z
Updated: 2024-10-25T18:32:25.798Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47406 vulnerable 2026-06-08 06:48:11.935932 Details available
CRITICAL (9.1)
Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability.
Published: 2024-10-25T06:18:36.274Z
Updated: 2024-10-25T18:38:24.503Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47005 vulnerable 2026-06-08 06:48:11.011912 Details available
HIGH (8.1)
Sharp and Toshiba Tec MFPs provide configuration related APIs. They are expected to be called by administrative users only, but insufficiently restricted. A non-administrative user may execute some configuration APIs.
Published: 2024-10-25T06:18:30.415Z
Updated: 2024-10-25T18:38:02.777Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45842 vulnerable 2026-06-08 06:48:09.703541 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45829 vulnerable 2026-06-08 06:48:09.107958 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43424 vulnerable 2026-06-08 06:45:50.905375 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42420 vulnerable 2026-06-08 06:43:56.823479 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.