Search
Find a vulnerability
Search criteria
1 vulnerability found for Network Scanner Tool by Sharp Corporation
JVNDB-2026-026397
Vulnerability from jvndb - Published: 2026-08-04 14:10 - Updated:2026-08-04 14:10
Severity
Summary
Sharp Network Scanner Tool insecure initial configuration
Details
Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation are Windows applications which work as FTP servers and accept scan outputs from MFPs.
With the initial configuration, anyone can upload files unlimitedly without authentication.
- Initialization of a Resource with an Insecure Default (CWE-1188) - CVE-2026-62416
References
| Type | URL | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | |
|---|---|---|
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-026397.html",
"dc:date": "2026-08-04T14:10+09:00",
"dcterms:issued": "2026-08-04T14:10+09:00",
"dcterms:modified": "2026-08-04T14:10+09:00",
"description": "Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation are Windows applications which work as FTP servers and accept scan outputs from MFPs.\r\nWith the initial configuration, anyone can upload files unlimitedly without authentication.\u003ca href=\u0027https://cwe.mitre.org/data/definitions/1188.html\u0027 target=\u0027_blank\u0027\u003e\u003c/a\u003e\u003cul\u003e\u003cli\u003eInitialization of a Resource with an Insecure Default (CWE-1188) - CVE-2026-62416\u003c/li\u003e\u003c/ul\u003eDeniz G\u0026#252;ney Y\u0026#305;ld\u0026#305;r\u0026#305;m reported this vulnerability to Sharp Corporation and coordinated. After the coordination was completed, Sharp Corporation reported the case to JPCERT/CC to notify users of the solution through JVN.",
"link": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-026397.html",
"sec:cpe": {
"#text": "cpe:/a:sharp:network_scanner_tool",
"@product": "Network Scanner Tool",
"@vendor": "Sharp Corporation",
"@version": "2.2"
},
"sec:cvss": {
"@score": "5.3",
"@severity": "Medium",
"@type": "Base",
"@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"@version": "3.0"
},
"sec:identifier": "JVNDB-2026-026397",
"sec:references": [
{
"#text": "https://jvn.jp/en/vu/JVNVU92540957/index.html",
"@id": "JVNVU#92540957",
"@source": "JVN"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2026-62416",
"@id": "CVE-2026-62416",
"@source": "CVE"
},
{
"#text": "https://cwe.mitre.org/data/definitions/1188.html",
"@id": "CWE-1188",
"@title": "Insecure Default Initialization of Resource(CWE-1188)"
}
],
"title": "Sharp Network Scanner Tool insecure initial configuration"
}