The vulnerability allows anyone to connect to the Network Scanner Tool or its Lite version without authentication and upload files without restriction. This lack of access control can trigger a denial‑of‑service condition by exhausting system resources. Additionally, if a malicious file is uploaded, the operating system may be tricked into executing that file, exposing the host PC to further attacks against other entities.

Affected products are the Sharp Corporation Network Scanner Tool and Network Scanner Tool Lite when deployed with their initial configuration. No specific version data is provided, so all installations using the default unauthenticated settings are potentially vulnerable.

The CVSS score of 6.9 indicates moderate severity, and because the EPSS score is not available, there is no current evidence of widespread exploitation. However, the product’s network‑exposed component and the ability to upload arbitrary files without authentication create a straightforward attack vector for remote attackers. Since the vulnerability is already exploitable in its out‑of‑the‑box configuration, attackers can readily use it to induce a denial of service and possibly prompt local execution of malicious payloads.