Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with the initial configuration, require no authentication and accept files unlimitedly. When the affected products are used with the initial configuration, anyone can connect to them without authentication and upload files unlimitedly. This may cause a denial-of-service (DoS) condition on the PC. Furthermore, if a malicious file is uploaded, a PC user may be tricked to execute the file to attack other entities from that PC.
Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with the initial configuration, require no authentication and accept files unlimitedly. When the affected products are used with the initial configuration, anyone can connect to them without authentication and upload files unlimitedly. This may cause a denial-of-service (DoS) condition on the PC. Furthermore, if a malicious file is uploaded, a PC user may be tricked to execute the file to attack other entities from that PC.
Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation are Windows applications which work as FTP servers and accept scan outputs from MFPs. With the initial configuration, anyone can upload files unlimitedly without authentication.<a href='https://cwe.mitre.org/data/definitions/1188.html' target='_blank'></a><ul><li>Initialization of a Resource with an Insecure Default (CWE-1188) - CVE-2026-62416</li></ul>Deniz Güney Yıldırım reported this vulnerability to Sharp Corporation and coordinated. After the coordination was completed, Sharp Corporation reported the case to JPCERT/CC to notify users of the solution through JVN.