What is CVE-2022-45796?

CVE-2022-45796 is a critical-severity vulnerability in Sharp Bp-30c25, classified under Command Injection. CVSS score: 9.1/10. Published 2022-12-16.

How severe is CVE-2022-45796?

Critical severity. CVSS v3 base score is 9.1 out of 10.

RCE in Sharp Bp-30c25

CVE-2022-45796

Command injection vulnerability in nw_interface.html in SHARP multifunction printers (MFPs)'s Digital Full-color Multifunctional System 202 or earlier, 120 or earlier, 600 or earlier, 121 or earlier, 500 or earlier, 402 or earlier, 790 or…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.032 (86.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H.

Affected products

Sharp Bp-30c25
Sharp Bp-30c25_firmware
Sharp Bp-30c25t
Sharp Bp-30c25t_firmware
Sharp Bp-30c25y
Sharp Bp-30c25y_firmware
Sharp Bp-30c25z
Sharp Bp-30c25z_firmware
Sharp Bp-30m28
Sharp Bp-30m28_firmware

Weakness classification (CWE)

CWE-77 — Command Injection

References

ART@zuso.ai (Mitigation, Vendor Advisory)
ART@zuso.ai
ART@zuso.ai
ART@zuso.ai (mailing-list)

Frequently asked questions

What is CVE-2022-45796?: CVE-2022-45796 is a critical-severity vulnerability in Sharp Bp-30c25, classified under Command Injection. CVSS score: 9.1/10. Published 2022-12-16.
How severe is CVE-2022-45796?: Critical severity. CVSS v3 base score is 9.1 out of 10.