SHARP CORPORATION

Products

ProductCVEsExploitedLatest
Multiple MFPs (multifunction printers)14–Nov 26, 2024
Sharp Digital Full-color MFPs and Monochrome MFPs9–Oct 25, 2024
Energy Management Controller with Cloud Services7–Feb 14, 2024
home 5G HR026–Mar 25, 2026
Wi-Fi STATION SH-54C6–Mar 25, 2026
Wi-Fi STATION SH-52B5–Mar 25, 2026
Sharp MFPs3–Aug 3, 2026
PocketWifi 809SH2–Dec 23, 2024
Speed Wi-Fi NEXT W072–Dec 23, 2024
Wi-Fi STATION SH-05L2–Dec 23, 2024
SHARP AQUOS series1–Apr 23, 2020
Network Scanner Tool Lite1–Aug 3, 2026
Network Scanner Tool (Bundled software for Sharpdesk)1–Aug 3, 2026
Speed Wi-Fi 5G X011–Mar 25, 2026
Multiple Multifunction Printers1–Oct 1, 2026
home 5G HR011–Mar 25, 2026
Wi-Fi STATION SH-52A1–Mar 25, 2026
Pocket WiFi 5G A503SH1–Mar 25, 2026
5G Mobile Router SH-U011–Mar 25, 2026

Exploited and recent CVEs

  • CVE-2024-58388 High 7.5 Sharp Multifunction Printers Local File Inclusion via installed_emanual_down.html 0.8%
  • CVE-2026-62416 Medium 5.3 Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with the initial configuration, require no authentication and accept files unlimitedly. When the affected products are 0.6%
  • CVE-2026-62416 Medium 5.3 Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with the initial configuration, require no authentication and accept files unlimitedly. When the affected products are 0.6%
  • CVE-2026-63563 Medium 6.5 Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication feature disabled in the initial configuration. When used with the initial config 0.4%
  • CVE-2026-63545 Low 2.4 Sharp and Toshiba Tec MFPs (multifunction printers) caches data internally when printing, and leave them uncleared. They may be accessed later by other users. 0.2%
  • CVE-2026-60011 Medium 5.3 Sharp and Toshiba Tec MFPs (multifunction printers) fail to properly authorize requests to directly access certain image data stored to the affected product. 0.4%
  • CVE-2026-32326 Medium 5.7 SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, 0.4%
  • CVE-2026-32326 Medium 5.7 SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, 0.4%
  • CVE-2026-32326 Medium 5.7 SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, 0.4%
  • CVE-2026-32326 Medium 5.7 SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, 0.4%
  • CVE-2026-32326 Medium 5.7 SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, 0.4%
  • CVE-2026-32326 Medium 5.7 SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, 0.4%
  • CVE-2026-32326 Medium 5.7 SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, 0.4%
  • CVE-2026-32326 Medium 5.7 SHARP routers do not perform authentication for some web APIs. The device information may be retrieved without authentication. If the administrative password of the device is left as the initial one, 0.4%
  • CVE-2024-54082 High 7.2 home 5G HR02 and Wi-Fi STATION SH-54C contain an OS command injection vulnerability in the configuration restore function. An arbitrary OS command may be executed with the root privilege by an adminis 1.2%
  • CVE-2024-54082 High 7.2 home 5G HR02 and Wi-Fi STATION SH-54C contain an OS command injection vulnerability in the configuration restore function. An arbitrary OS command may be executed with the root privilege by an adminis 1.2%
  • CVE-2024-52321 Medium 5.9 Multiple SHARP routers contain an improper authentication vulnerability in the configuration backup function. The product's backup files containing sensitive information may be retrieved by a remote u 0.5%
  • CVE-2024-52321 Medium 5.9 Multiple SHARP routers contain an improper authentication vulnerability in the configuration backup function. The product's backup files containing sensitive information may be retrieved by a remote u 0.5%
  • CVE-2024-52321 Medium 5.9 Multiple SHARP routers contain an improper authentication vulnerability in the configuration backup function. The product's backup files containing sensitive information may be retrieved by a remote u 0.5%
  • CVE-2024-52321 Medium 5.9 Multiple SHARP routers contain an improper authentication vulnerability in the configuration backup function. The product's backup files containing sensitive information may be retrieved by a remote u 0.5%
  • CVE-2024-52321 Medium 5.9 Multiple SHARP routers contain an improper authentication vulnerability in the configuration backup function. The product's backup files containing sensitive information may be retrieved by a remote u 0.5%
  • CVE-2024-52321 Medium 5.9 Multiple SHARP routers contain an improper authentication vulnerability in the configuration backup function. The product's backup files containing sensitive information may be retrieved by a remote u 0.5%
  • CVE-2024-47864 Medium 5.3 home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow vulnerability in the hidden debug function. A remote unauthenticated attacker may get the web console of the prod 0.6%
  • CVE-2024-47864 Medium 5.3 home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow vulnerability in the hidden debug function. A remote unauthenticated attacker may get the web console of the prod 0.6%
  • CVE-2024-47864 Medium 5.3 home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow vulnerability in the hidden debug function. A remote unauthenticated attacker may get the web console of the prod 0.6%
  • CVE-2024-46873 Critical 9.8 Multiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be executed with the root privilege by a remote unauthenticated attacker. 0.7%
  • CVE-2024-46873 Critical 9.8 Multiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be executed with the root privilege by a remote unauthenticated attacker. 0.7%
  • CVE-2024-46873 Critical 9.8 Multiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be executed with the root privilege by a remote unauthenticated attacker. 0.7%
  • CVE-2024-46873 Critical 9.8 Multiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be executed with the root privilege by a remote unauthenticated attacker. 0.7%
  • CVE-2024-46873 Critical 9.8 Multiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be executed with the root privilege by a remote unauthenticated attacker. 0.7%