Sharp Digital MFP Unauthorized Access and Information Disclosure Vulnerabilities Advisory

The following is a summary of the key vulnerability information from the webpage screenshot: --- Vulnerability Overview Sharp Corporation has identified multiple security vulnerabilities in certain of its digital multifunction printers (MFPs), primarily involving: CVE-2026-60011: HTTP requests for web pages can be tampered with, leading to unauthorized access or information disclosure. CVE-2026-63545: PDF files stored on USB storage devices can be copied and printed, potentially exposing sensitive information. CVE-475 and CVE-459: Other functional modules contain potential risks. These vulnerabilities may lead to: Unauthorized access to MFP functions Information leakage (e.g., images, documents) Malicious control of the system --- Affected Range The affected products are models prior to the following firmware versions: Digital Color MFPs BP-71C6S/BP-71C5S/BP-71C4S/BP-71C36/... → Prior to “301” BP-70C6S/BP-70C5S/BP-70C4S/BP-70C36/... → Prior to “511” MX-8081 → Prior to “203” MX-617I/MX-517I/MX-417I/MX-366I/... → Prior to “615” BP-30C25 → Prior to “203” MX-6170FN/MX-5170FN/MX-4170FN/MX-6170FV/... → Prior to “804” MX-6150FN/MX-5150FN/MX-4150FN/MX-3650FN/... → Prior to “804” BP-C533WD/BP-C533WR → Prior to “410” MX-C306W/MX-C305W → Prior to “522” Digital Mono (Black and White) MFPs BP-70M90/BP-70M75 → Prior to “520” BP-71M6S/BP-71M5S/BP-71M4S → Prior to “301” BP-70M6S/BP-70M5S/BP-70M4S → Prior to “511” MX-M1206/MX-M1056 → Prior to “301” (Prior to “311” if equipped with the MX-FR66U kit) MX-M7570/MX-M6570 → Prior to “457” MX-M607I/MX-M507I/MX-M407I/MX-M353I → Prior to “414” BP-30M3S/BP-30M3I/BP-30M2B/BP-30M3I → Prior to “304” MX-M6070/MX-M5070/MX-M4070 → Prior to “504” MX-B455W → Prior to “405” (Prior to “406” if equipped with the MX-FR59U kit) > Note: For instructions on confirming firmware versions, please refer to the page description (viewable via the admin interface or web page). --- Remediation Immediate Measures: 1. Disconnect from the Network: Isolate the MFP from direct internet connections and protect it using a firewall/router. 2. Change Default Passwords: Modify passwords for "Administrator" and "User" accounts; avoid using factory default values. 3. Regularly Audit Logs: Check for abnormal access behavior. Long-term Measures: Upgrade firmware to the latest version (specific versions should be confirmed by contacting Sharp support). Refer to Sharp’s official security guide: https://www.sharp.co.jp/business/print/solution/security/state1.html#setGuide Contact Support: Sharp Marketing Japan Co., Ltd. Business Solutions Department Okinawa Sharp Electronics Co., Ltd. Website: https://www.sharp.co.jp/business/print/contact/index-support.html --- Additional Information The vulnerabilities were reported by Mehamed Abdelhady (Cyber 50 Defense). Related advisory number: JVNVU9875987 Update date: July 31, 2026 --- > ⚠️ Note: Some models have reached end-of-support status. It is recommended to migrate to new equipment or perform firmware upgrades as soon as possible.

Goal Reached Thanks to every supporter — we hit 100%!

Sharp Digital MFP Unauthorized Access and Information Disclosure Vulnerabilities Advisory