CVE-2024-48870: Sharp Bp-30c25 Firmware

Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerability. If crafted input is stored by an administrative user, malicious script may be executed on the web browsers of other victim users.

Affected products

• Sharp Bp-30c25 Firmware: affected versions not specified
• Sharp Bp-30c25t Firmware: affected versions not specified
• Sharp Bp-30c25y Firmware: affected versions not specified
• Sharp Bp-30c25z Firmware: affected versions not specified
• Sharp Bp-30m28 Firmware: affected versions not specified
• Sharp Bp-30m28t Firmware: affected versions not specified
• Sharp Bp-30m31 Firmware: affected versions not specified
• Sharp Bp-30m31t Firmware: affected versions not specified
• Sharp Bp-30m35 Firmware: affected versions not specified
• Sharp Bp-30m35t Firmware: affected versions not specified
• Sharp Bp-50c26 Firmware: affected versions not specified
• Sharp Bp-50c31 Firmware: affected versions not specified
• Sharp Bp-50c36 Firmware: affected versions not specified
• Sharp Bp-50c45 Firmware: affected versions not specified
• Sharp Bp-50c55 Firmware: affected versions not specified
• Sharp Bp-50c65 Firmware: affected versions not specified
• Sharp Bp-50m26 Firmware: affected versions not specified
• Sharp Bp-50m31 Firmware: affected versions not specified
• Sharp Bp-50m36 Firmware: affected versions not specified
• Sharp Bp-50m45 Firmware: affected versions not specified
• Sharp Bp-50m50 Firmware: affected versions not specified
• Sharp Bp-50m55 Firmware: affected versions not specified
• Sharp Bp-55c26 Firmware: affected versions not specified
• Sharp Bp-60c31 Firmware: affected versions not specified
• Sharp Bp-60c36 Firmware: affected versions not specified
• and 295 more

Published 2024-10-25. Last modified 2026-06-17.