Cyber Resilience

CVE-2022-45796

CriticalRCE

Published: 16 December 2022

Published
16 December 2022
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS Score 0.0279 86.4th percentile
Risk Priority 20 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2022-45796 is a critical-severity Command Injection (CWE-77) vulnerability in Sharp Bp-30C25 Firmware. Its CVSS base score is 9.1 (Critical).

Operationally, ranked in the top 13.6% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

Command injection vulnerability in nw_interface.html in SHARP multifunction printers (MFPs)'s Digital Full-color Multifunctional System 202 or earlier, 120 or earlier, 600 or earlier, 121 or earlier, 500 or earlier, 402 or earlier, 790 or earlier, and Digital Multifunctional System (Monochrome)…

more

200 or earlier, 211 or earlier, 102 or earlier, 453 or earlier, 400 or earlier, 202 or earlier, 602 or earlier, 500 or earlier, 401 or earlier allows remote attackers to execute arbitrary commands via unspecified vectors.

CWE(s)
CWE-77

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

sharp
bp-30c25 firmware
all versions
sharp
bp-30c25t firmware
all versions
sharp
bp-30c25y firmware
all versions
sharp
bp-30c25z firmware
all versions
sharp
bp-30m28 firmware
all versions
sharp
bp-30m28t firmware
all versions
sharp
bp-30m31 firmware
all versions
sharp
bp-30m31t firmware
all versions
sharp
bp-30m35 firmware
all versions
sharp
bp-30m35t firmware
all versions
+148 more product configuration(s) — see NVD for full list

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References