MEDIUMCVSS 6.9 · MEDIUM
Exploitation ongoing with high activity in latest observed window (1 mentions)
Immediate actions
- Prioritize remediation for affected systems immediately
- Assume compromise if assets are exposed
- Hunt for exploitation attempts and persistence artifacts
- Increase monitoring for publicly documented tradecraft
- Track advisory updates for patch or workaround availability
Recommended action window: Immediate (within 24h)
NVD description
Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication feature disabled in the initial configuration. When used with the initial configuration, the address book editing and a range of features related to Document Filing can be accessed without user authentication.
Products intended for the Japanese market are not affected.