Access Control

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. Affected devices create coredump files when crashed, storing them with world-readable permission. Any local user of the device can examine the coredump files, and research the mem…CVE-2024-28955Sharp Corporation · CVSS 5.9 · 1.3% likely

   CWE-732

2. The web interface of the affected devices is designed to hide the LDAP credentials even for administrative users. But configuring LDAP authentication to "SIMPLE", the device commu…CVE-2024-34162Sharp Corporation · CVSS 5.3 · 0.8% likely

   CWE-767

3. Sharp and Toshiba Tec MFPs provide configuration related APIs. They are expected to be called by administrative users only, but insufficiently restricted. A non-administrative use…CVE-2024-47005Sharp Corporation · CVSS 8.1 · 0.5% likely

   CWE-749

4. Sharp and Toshiba Tec MFPs (multifunction printers) fail to properly authorize requests to directly access certain image data stored to the affected product.CVE-2026-60011Sharp Corporation · CVSS 5.3 · 0.4% likely

   CWE-425

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.