SHARP CORPORATION
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Multiple MFPs (multifunction printers) | 14 | – | Nov 26, 2024 |
| Sharp Digital Full-color MFPs and Monochrome MFPs | 9 | – | Oct 25, 2024 |
| Energy Management Controller with Cloud Services | 7 | – | Feb 14, 2024 |
| home 5G HR02 | 6 | – | Mar 25, 2026 |
| Wi-Fi STATION SH-54C | 6 | – | Mar 25, 2026 |
| Wi-Fi STATION SH-52B | 5 | – | Mar 25, 2026 |
| Sharp MFPs | 3 | – | Aug 3, 2026 |
| PocketWifi 809SH | 2 | – | Dec 23, 2024 |
| Speed Wi-Fi NEXT W07 | 2 | – | Dec 23, 2024 |
| Wi-Fi STATION SH-05L | 2 | – | Dec 23, 2024 |
| SHARP AQUOS series | 1 | – | Apr 23, 2020 |
| Network Scanner Tool Lite | 1 | – | Aug 3, 2026 |
| Network Scanner Tool (Bundled software for Sharpdesk) | 1 | – | Aug 3, 2026 |
| Speed Wi-Fi 5G X01 | 1 | – | Mar 25, 2026 |
| Multiple Multifunction Printers | 1 | – | Oct 1, 2026 |
| home 5G HR01 | 1 | – | Mar 25, 2026 |
| Wi-Fi STATION SH-52A | 1 | – | Mar 25, 2026 |
| Pocket WiFi 5G A503SH | 1 | – | Mar 25, 2026 |
| 5G Mobile Router SH-U01 | 1 | – | Mar 25, 2026 |
Exploited and recent CVEs
- CVE-2024-58388 Sharp Multifunction Printers Local File Inclusion via installed_emanual_down.html 0.8%
- CVE-2026-62416 Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with the initial configuration, require no authentication and accept files unlimitedly. When the affected products are 0.6%
- CVE-2026-62416 Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with the initial configuration, require no authentication and accept files unlimitedly. When the affected products are 0.6%
- CVE-2026-63563 Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication feature disabled in the initial configuration. When used with the initial config 0.4%
- CVE-2026-63545 Sharp and Toshiba Tec MFPs (multifunction printers) caches data internally when printing, and leave them uncleared. They may be accessed later by other users. 0.2%
- CVE-2026-60011 Sharp and Toshiba Tec MFPs (multifunction printers) fail to properly authorize requests to directly access certain image data stored to the affected product. 0.4%
- CVE-2026-32326 SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, 0.4%
- CVE-2026-32326 SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, 0.4%
- CVE-2026-32326 SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, 0.4%
- CVE-2026-32326 SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, 0.4%
- CVE-2026-32326 SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, 0.4%
- CVE-2026-32326 SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, 0.4%
- CVE-2026-32326 SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, 0.4%
- CVE-2026-32326 SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, 0.4%
- CVE-2024-54082 home 5G HR02 and Wi-Fi STATION SH-54C contain an OS command injection vulnerability in the configuration restore function. An arbitrary OS command may be executed with the root privilege by an adminis 1.2%
- CVE-2024-54082 home 5G HR02 and Wi-Fi STATION SH-54C contain an OS command injection vulnerability in the configuration restore function. An arbitrary OS command may be executed with the root privilege by an adminis 1.2%
- CVE-2024-52321 Multiple SHARP routers contain an improper authentication vulnerability in the configuration backup function. The product's backup files containing sensitive information may be retrieved by a remote u 0.5%
- CVE-2024-52321 Multiple SHARP routers contain an improper authentication vulnerability in the configuration backup function. The product's backup files containing sensitive information may be retrieved by a remote u 0.5%
- CVE-2024-52321 Multiple SHARP routers contain an improper authentication vulnerability in the configuration backup function. The product's backup files containing sensitive information may be retrieved by a remote u 0.5%
- CVE-2024-52321 Multiple SHARP routers contain an improper authentication vulnerability in the configuration backup function. The product's backup files containing sensitive information may be retrieved by a remote u 0.5%
- CVE-2024-52321 Multiple SHARP routers contain an improper authentication vulnerability in the configuration backup function. The product's backup files containing sensitive information may be retrieved by a remote u 0.5%
- CVE-2024-52321 Multiple SHARP routers contain an improper authentication vulnerability in the configuration backup function. The product's backup files containing sensitive information may be retrieved by a remote u 0.5%
- CVE-2024-47864 home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow vulnerability in the hidden debug function. A remote unauthenticated attacker may get the web console of the prod 0.6%
- CVE-2024-47864 home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow vulnerability in the hidden debug function. A remote unauthenticated attacker may get the web console of the prod 0.6%
- CVE-2024-47864 home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow vulnerability in the hidden debug function. A remote unauthenticated attacker may get the web console of the prod 0.6%
- CVE-2024-46873 Multiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be executed with the root privilege by a remote unauthenticated attacker. 0.7%
- CVE-2024-46873 Multiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be executed with the root privilege by a remote unauthenticated attacker. 0.7%
- CVE-2024-46873 Multiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be executed with the root privilege by a remote unauthenticated attacker. 0.7%
- CVE-2024-46873 Multiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be executed with the root privilege by a remote unauthenticated attacker. 0.7%
- CVE-2024-46873 Multiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be executed with the root privilege by a remote unauthenticated attacker. 0.7%