EUVD-2026-52252
GHSA-44px-2m24-8wv4
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
AV:N/PR:N confirmed by default-unauthenticated network service; I:L added over vendor score because arbitrary file write to host filesystem constitutes integrity impact beyond DoS alone.
Primary rating from Vendor (jpcert).
CVSS VectorVendor: jpcert
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
2DescriptionCVE.org
Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with the initial configuration, require no authentication and accept files unlimitedly. When the affected products are used with the initial configuration, anyone can connect to them without authentication and upload files unlimitedly. This may cause a denial-of-service (DoS) condition on the PC. Furthermore, if a malicious file is uploaded, a PC user may be tricked to execute the file to attack other entities from that PC.
AnalysisAI
Sharp Corporation's Network Scanner Tool and Network Scanner Tool Lite expose unauthenticated, unlimited file upload endpoints by default, enabling two distinct attack outcomes against any PC running the software in its initial configuration. An unauthenticated network attacker can flood the host with uploaded files to exhaust disk or system resources, causing a denial-of-service condition; separately, a threat actor can stage malicious executables that a local PC user may be socially engineered into running, enabling downstream attacks against other systems. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that the affected product is running in its initial (default) configuration, meaning authentication has not been manually enabled by an administrator post-installation - the software ships with authentication disabled. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor-assigned CVSS of 5.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) captures only the direct denial-of-service path and underweights the integrity risk from unrestricted file write to the host filesystem. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker on the same office network - or any network segment with access to the PC's scanner tool port - connects to the unauthenticated service and scripted-uploads thousands of large files in rapid succession, exhausting disk space on the target PC and causing a denial-of-service condition affecting local productivity software. In a more targeted scenario, the attacker uploads a trojanized document named to mimic a recently scanned file (e.g., 'Scan_Invoice_2026.exe'), then uses phishing or physical presence to encourage the PC user to open the apparent scan result, achieving code execution on the host. … |
| Remediation | Consult the vendor advisory at https://global.sharp/corporate/info/product-security/advisory-list/2026-005/ for patch or configuration update guidance; an exact patched version number was not available in the data provided at time of analysis ('Patch available per vendor advisory'). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today