peter bassill · operator
$ cve CVE-2022-45796 JSON

CVE-2022-45796

9.1
CRITICAL · CVSS 3.1 · EPSS 3.3% (pctl 88)

In your normal cycle

Critical by CVSS (9.1), but no sign of active exploitation.

Description

Command injection vulnerability in nw_interface.html in SHARP multifunction printers (MFPs)'s Digital Full-color Multifunctional System 202 or earlier, 120 or earlier, 600 or earlier, 121 or earlier, 500 or earlier, 402 or earlier, 790 or earlier, and Digital Multifunctional System (Monochrome) 200 or earlier, 211 or earlier, 102 or earlier, 453 or earlier, 400 or earlier, 202 or earlier, 602 or earlier, 500 or earlier, 401 or earlier allows remote attackers to execute arbitrary commands via unspecified vectors.

Scoring

CVSS9.1 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS3.29% — more likely to be exploited than 88% of all CVEs
WeaknessCWE-77
On CISA KEVno
Public exploitnone known
Published2022-12-16
Last modified2026-06-17

Affected (40)

VendorProduct
sharpbp-30c25
sharpbp-30c25 firmware
sharpbp-30c25t
sharpbp-30c25t firmware
sharpbp-30c25y
sharpbp-30c25y firmware
sharpbp-30c25z
sharpbp-30c25z firmware
sharpbp-30m28
sharpbp-30m28 firmware
sharpbp-30m28t
sharpbp-30m28t firmware
sharpbp-30m31
sharpbp-30m31 firmware
sharpbp-30m31t
sharpbp-30m31t firmware
sharpbp-30m35
sharpbp-30m35 firmware
sharpbp-30m35t
sharpbp-30m35t firmware
sharpbp-50c26
sharpbp-50c26 firmware
sharpbp-50c31
sharpbp-50c31 firmware
sharpbp-50c36
sharpbp-50c36 firmware
sharpbp-50c45
sharpbp-50c45 firmware
sharpbp-50c55
sharpbp-50c55 firmware
sharpbp-50c65
sharpbp-50c65 firmware
sharpbp-50m26
sharpbp-50m26 firmware
sharpbp-50m31
sharpbp-50m31 firmware
sharpbp-50m36
sharpbp-50m36 firmware
sharpbp-50m45
sharpbp-50m45 firmware

References

→ the Explorer  ·  watch your stack  ·  NVD