PatchTheCVEbp-90c80 firmware vulnerabilities and fixes
Recent CVEs affecting bp-90c80 firmware, with upgrade or downgrade steps. 9 tracked.
Also searched as: bp 90c80 firmware, bp-90c80firmware.
bp-90c80 firmware has 9 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 9. Most recent: 2024-10-25. Highest priority: CVE-2024-47406 (score 49/100).
- CVE-2024-48870 MEDIUM 6.2 UPGRADE UPGRADE Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cros
- CVE-2024-47801 HIGH 7.4 UPGRADE UPGRADE Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cros
- CVE-2024-47549 HIGH 7.4 UPGRADE UPGRADE Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination
- CVE-2024-47406 CRITICAL 9.1 UPGRADE UPGRADE Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication byp
- CVE-2024-47005 HIGH 8.1 UPGRADE UPGRADE Sharp and Toshiba Tec MFPs provide configuration related APIs
- CVE-2024-45842 MEDIUM 5.3 UPGRADE UPGRADE Sharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path Traversal vuln
- CVE-2024-45829 MEDIUM 4.9 UPGRADE UPGRADE Sharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are
- CVE-2024-43424 HIGH 7.5 UPGRADE UPGRADE Sharp and Toshiba Tec MFPs improperly process HTTP request headers, resulting in an Out-of-bounds Read vulnera
- CVE-2024-42420 HIGH 7.5 UPGRADE UPGRADE Sharp and Toshiba Tec MFPs contain multiple Out-of-bounds Read vulnerabilities, due to improper processing of
FAQ
How do I fix bp-90c80 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bp-90c80 firmware being exploited right now?
None of the tracked bp-90c80 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bp-90c80 firmware CVE should I patch first?
CVE-2024-47406 currently ranks highest (49/100): Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication byp.