Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-46873 EUVD-2024-42200GHSA-v3gr-mcr8-2wv5

Multiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be executed with the root privilege by a remote…

Published Dec 23, 2024 · Updated Dec 24, 2024 · Assigned by jpcert

Description

Multiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be executed with the root privilege by a remote unauthenticated attacker.

Affected products

VendorProductAffectedFixed
Sharp home 5G HR02 S5.82.00 and earlier —
Sharp Wi-Fi STATION SH-52B S3.87.11 and earlier —
Sharp Wi-Fi STATION SH-54C S6.60.00 and earlier —
Sharp Wi-Fi STATION SH-05L 01.00.C0 and earlier —
Sharp PocketWifi 809SH 01.00.B9 and earlier —
Sharp Speed Wi-Fi NEXT W07 02.00.48 and earlier —

References