Approved changes feed: RSS · Atom

cpe:2.3:o:sharp:mx-m6071_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorSharp (8ff31356-2c53-5c5d-9221-e83f6c803e0a)
ProductMx M6071 Firmware (ad1ba4f7-5c3a-5427-a9dd-846a9b1000d6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-48870 vulnerable 2026-06-08 06:50:10.740315 Details available
MEDIUM (6.2)
Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerability. If crafted input is stored by an administrative user, malicious script may be executed on the web browsers of other victim users.
Published: 2024-10-25T06:18:57.297Z
Updated: 2024-10-25T14:15:16.927Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47801 vulnerable 2026-06-08 06:48:13.191925 Details available
HIGH (7.4)
Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability. Accessing a crafted URL which points to an affected product may cause malicious script executed on the web browser.
Published: 2024-10-25T06:18:50.793Z
Updated: 2024-10-25T14:16:46.537Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47549 vulnerable 2026-06-08 06:48:12.573708 Details available
HIGH (7.4)
Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP response headers. Accessing a crafted URL which points to an affected product may cause malicious script executed on the web browser.
Published: 2024-10-25T06:18:42.287Z
Updated: 2024-10-25T18:32:25.798Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47406 vulnerable 2026-06-08 06:48:11.934086 Details available
CRITICAL (9.1)
Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability.
Published: 2024-10-25T06:18:36.274Z
Updated: 2024-10-25T18:38:24.503Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47005 vulnerable 2026-06-08 06:48:11.009293 Details available
HIGH (8.1)
Sharp and Toshiba Tec MFPs provide configuration related APIs. They are expected to be called by administrative users only, but insufficiently restricted. A non-administrative user may execute some configuration APIs.
Published: 2024-10-25T06:18:30.415Z
Updated: 2024-10-25T18:38:02.777Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45842 vulnerable 2026-06-08 06:48:09.688913 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45829 vulnerable 2026-06-08 06:48:09.256483 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43424 vulnerable 2026-06-08 06:45:50.866482 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42420 vulnerable 2026-06-08 06:43:56.789079 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45796 vulnerable 2026-06-08 05:50:37.214923 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.