PT-2022-27644 · Sharp · Sharp Digital Multifunctional System+1

Shen Yen Chun · Published 2022-12-16 · Updated 2024-07-04 · CVE-2022-45796

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SHARP Digital Full-color Multifunctional System versions 202 or earlier SHARP Digital Full-color Multifunctional System versions 120 or earlier SHARP Digital Full-color Multifunctional System versions 600 or earlier SHARP Digital Full-color Multifunctional System versions 121 or earlier SHARP Digital Full-color Multifunctional System versions 500 or earlier SHARP Digital Full-color Multifunctional System versions 402 or earlier SHARP Digital Full-color Multifunctional System versions 790 or earlier SHARP Digital Multifunctional System (Monochrome) versions 200 or earlier SHARP Digital Multifunctional System (Monochrome) versions 211 or earlier SHARP Digital Multifunctional System (Monochrome) versions 102 or earlier SHARP Digital Multifunctional System (Monochrome) versions 453 or earlier SHARP Digital Multifunctional System (Monochrome) versions 400 or earlier SHARP Digital Multifunctional System (Monochrome) versions 202 or earlier SHARP Digital Multifunctional System (Monochrome) versions 602 or earlier SHARP Digital Multifunctional System (Monochrome) versions 500 or earlier SHARP Digital Multifunctional System (Monochrome) versions 401 or earlier

Description A command injection vulnerability exists in the nw interface.html file of SHARP multifunction printers' Digital Full-color Multifunctional System and Digital Multifunctional System (Monochrome), allowing remote attackers to execute arbitrary commands via unspecified vectors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2022-45796

Affected Products

Sharp Digital Full-Color Multifunctional System

Sharp Digital Multifunctional System

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-45796 · Security Note
• https://global.sharp/products/copier/info/info_security_2022-11.html · Vendor Advisory
• https://jvn.jp/en/vu/JVNVU96195138/index.html · Note
• https://zuso.ai/advisory/ZA-2022-01.html · Note
• http://seclists.org/fulldisclosure/2024/Jul/0 · Note
• https://t.me/cvenotify/44332 · Telegram Post