CVE-2024-47549: Sharp Bp-30c25 Firmware

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP response headers. Accessing a crafted URL which points to an affected product may cause malicious script executed on the web browser.

Affected products

• Sharp Bp-30c25 Firmware: affected versions not specified
• Sharp Bp-30c25t Firmware: affected versions not specified
• Sharp Bp-30c25y Firmware: affected versions not specified
• Sharp Bp-30c25z Firmware: affected versions not specified
• Sharp Bp-30m28 Firmware: affected versions not specified
• Sharp Bp-30m28t Firmware: affected versions not specified
• Sharp Bp-30m31 Firmware: affected versions not specified
• Sharp Bp-30m31t Firmware: affected versions not specified
• Sharp Bp-30m35 Firmware: affected versions not specified
• Sharp Bp-30m35t Firmware: affected versions not specified
• Sharp Bp-50c26 Firmware: affected versions not specified
• Sharp Bp-50c31 Firmware: affected versions not specified
• Sharp Bp-50c36 Firmware: affected versions not specified
• Sharp Bp-50c45 Firmware: affected versions not specified
• Sharp Bp-50c55 Firmware: affected versions not specified
• Sharp Bp-50c65 Firmware: affected versions not specified
• Sharp Bp-50m26 Firmware: affected versions not specified
• Sharp Bp-50m31 Firmware: affected versions not specified
• Sharp Bp-50m36 Firmware: affected versions not specified
• Sharp Bp-50m45 Firmware: affected versions not specified
• Sharp Bp-50m50 Firmware: affected versions not specified
• Sharp Bp-50m55 Firmware: affected versions not specified
• Sharp Bp-55c26 Firmware: affected versions not specified
• Sharp Bp-60c31 Firmware: affected versions not specified
• Sharp Bp-60c36 Firmware: affected versions not specified
• and 295 more

Published 2024-10-25. Last modified 2026-06-17.