EUVD-2026-52251
GHSA-hj84-h226-g524
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Authentication is disabled by factory default so PR:N is correct; impact limited to address book and document filing data, no availability consequence.
Primary rating from Vendor (jpcert).
CVSS VectorVendor: jpcert
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
2DescriptionCVE.org
Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication feature disabled in the initial configuration. When used with the initial configuration, the address book editing and a range of features related to Document Filing can be accessed without user authentication. Products intended for the Japanese market are not affected.
AnalysisAI
Unauthenticated network access to address book editing and Document Filing features is possible on Sharp and Toshiba Tec multifunction printers (MFPs) sold outside Japan, because these devices ship from the factory with user authentication disabled. The root cause is CWE-1188 (Insecure Default Initialization of Resource) - the authentication control exists but is not activated in the initial configuration, meaning any network-reachable attacker can access sensitive stored data and modify contact directories without credentials. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that the target MFP is a Sharp Corporation or Toshiba Tec Corporation model sold outside Japan AND that the device is still operating in its initial factory configuration with user authentication not yet enabled by an administrator. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 base score of 6.5 reflects a Medium-severity finding with AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N - network-accessible, low complexity, no privileges, no user interaction, but limited confidentiality and integrity impact with no availability consequence. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker connected to the same network segment as the MFP - such as a corporate network user, a guest Wi-Fi visitor with lateral access, or an insider - browses directly to the device's web administration interface. Because authentication is disabled in the factory default configuration, the attacker is immediately presented with the address book management and Document Filing screens, allowing them to enumerate employee contact entries or retrieve previously scanned documents stored on the device without entering any credentials. |
| Remediation | The primary remediation is to enable user authentication on the affected MFPs via the device administration interface - this is a configuration change, not a firmware update. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Sharp Mfps
View allUnauthenticated network access to stored image data affects Sharp and Toshiba Tec multifunction printers via a forced br
Incomplete cleanup of cached print job data in Sharp and Toshiba Tec multifunction printers exposes previously printed d
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today