Vulnerability · Published Dec 23, 2024 · Assigned by jpcert
CVE-2024-46873
Critical 9.8
In plain English
A critical-severity security flaw in home 5G HR02 from Sharp Corporation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 55% of all known vulnerabilities).
Severity (CVSS 3.0)9.8Critical
Exploit odds (30 days)0.7%top 45.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Multiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be executed with the root privilege by a remote unauthenticated attacker.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Sharp Corporation | home 5G HR02 | S5.82.00 and earlier |
| Sharp Corporation | Wi-Fi STATION SH-52B | S3.87.11 and earlier |
| Sharp Corporation | Wi-Fi STATION SH-54C | S6.60.00 and earlier |
| Sharp Corporation | Wi-Fi STATION SH-05L | 01.00.C0 and earlier |
| Sharp Corporation | PocketWifi 809SH | 01.00.B9 and earlier |
| Sharp Corporation | Speed Wi-Fi NEXT W07 | 02.00.48 and earlier |
Weakness: CWE-489 · Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H