CVE-2024-47801: Sharp Bp-30c25 Firmware

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability. Accessing a crafted URL which points to an affected product may cause malicious script executed on the web browser.

Affected products

• Sharp Bp-30c25 Firmware: affected versions not specified
• Sharp Bp-30c25t Firmware: affected versions not specified
• Sharp Bp-30c25y Firmware: affected versions not specified
• Sharp Bp-30c25z Firmware: affected versions not specified
• Sharp Bp-30m28 Firmware: affected versions not specified
• Sharp Bp-30m28t Firmware: affected versions not specified
• Sharp Bp-30m31 Firmware: affected versions not specified
• Sharp Bp-30m31t Firmware: affected versions not specified
• Sharp Bp-30m35 Firmware: affected versions not specified
• Sharp Bp-30m35t Firmware: affected versions not specified
• Sharp Bp-50c26 Firmware: affected versions not specified
• Sharp Bp-50c31 Firmware: affected versions not specified
• Sharp Bp-50c36 Firmware: affected versions not specified
• Sharp Bp-50c45 Firmware: affected versions not specified
• Sharp Bp-50c55 Firmware: affected versions not specified
• Sharp Bp-50c65 Firmware: affected versions not specified
• Sharp Bp-50m26 Firmware: affected versions not specified
• Sharp Bp-50m31 Firmware: affected versions not specified
• Sharp Bp-50m36 Firmware: affected versions not specified
• Sharp Bp-50m45 Firmware: affected versions not specified
• Sharp Bp-50m50 Firmware: affected versions not specified
• Sharp Bp-50m55 Firmware: affected versions not specified
• Sharp Bp-55c26 Firmware: affected versions not specified
• Sharp Bp-60c31 Firmware: affected versions not specified
• Sharp Bp-60c36 Firmware: affected versions not specified
• and 295 more

Published 2024-10-25. Last modified 2026-06-17.