CVE Vulnerabilities

CVE-2024-47406

Authentication Bypass Using an Alternate Path or Channel

Published: Oct 25, 2024 | Modified: Nov 05, 2024
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability.

Weakness

The product requires authentication, but the product has an alternate path or channel that does not require authentication.

Affected Software

NameVendorStart VersionEnd Version
E-studio1058_firmwareToshibatec*t1.01.h4.00 (including)

Potential Mitigations

References