by Kastro
Paper/Archive/CVE-2024-46873

CVE-2024-46873

Sharp Corporation home 5G HR02 — Multiple SHARP routers leave the hidden debug function enabled.

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 54.5.545 × 2010.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Multiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be executed with the root privilege by a remote unauthenticated attacker.

Affected

ProductAffectedFixed inSource
home 5G HR02S5.82.00 and earlier–CNA
Wi-Fi STATION SH-52BS3.87.11 and earlier–CNA
Wi-Fi STATION SH-54CS6.60.00 and earlier–CNA
Wi-Fi STATION SH-05L01.00.C0 and earlier–CNA
PocketWifi 809SH01.00.B9 and earlier–CNA
Speed Wi-Fi NEXT W0702.00.48 and earlier–CNA

Scores by source

jpcert (CNA)9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refk-tai.sharp.co.jp/support/info/info083.htmlrefjvn.jp/en/jp/JVN61635834