Vulnerability · Published Dec 22, 2025 · Assigned by NEC
CVE-2025-12049
Critical 9.2
In plain English
A critical-severity missing authentication in Media Player MP-01 from Sharp Display Solutions, Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).
Official description
Missing Authentication for Critical Function vulnerability in Sharp Display Solutions Media Player MP-01 All Verisons allows a attacker may access to the web interface of the affected product without authentication and change settings or perform other operations, and deliver content from the authoring software to the affected product without authentication.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Sharp Display Solutions, Ltd. | Media Player MP-01 | All versions |
Weakness: CWE-306 · Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N