PatchTheCVEtoshibatec vulnerabilities
Recent CVEs affecting toshibatec products. 9 tracked.
toshibatec has 9 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 9. Most recent: 2024-10-25. Highest priority: CVE-2024-47406 (score 49/100).
- CVE-2024-48870 MEDIUM 6.2 UPGRADE UPGRADE Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cros
- CVE-2024-47801 HIGH 7.4 UPGRADE UPGRADE Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cros
- CVE-2024-47549 HIGH 7.4 UPGRADE UPGRADE Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination
- CVE-2024-47406 CRITICAL 9.1 UPGRADE UPGRADE Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication byp
- CVE-2024-47005 HIGH 8.1 UPGRADE UPGRADE Sharp and Toshiba Tec MFPs provide configuration related APIs
- CVE-2024-45842 MEDIUM 5.3 UPGRADE UPGRADE Sharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path Traversal vuln
- CVE-2024-45829 MEDIUM 4.9 UPGRADE UPGRADE Sharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are
- CVE-2024-43424 HIGH 7.5 UPGRADE UPGRADE Sharp and Toshiba Tec MFPs improperly process HTTP request headers, resulting in an Out-of-bounds Read vulnera
- CVE-2024-42420 HIGH 7.5 UPGRADE UPGRADE Sharp and Toshiba Tec MFPs contain multiple Out-of-bounds Read vulnerabilities, due to improper processing of
FAQ
How do I fix toshibatec vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is toshibatec being exploited right now?
None of the tracked toshibatec CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which toshibatec CVE should I patch first?
CVE-2024-47406 currently ranks highest (49/100): Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication byp.