CVE-2024-46873

State: Published
Severity: 9.8 Critical
Published: Dec 23, 2024
Updated: Dec 24, 2024
Reserved: Dec 2, 2024

Description

Multiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be executed with the root privilege by a remote unauthenticated attacker.

Scores

CVSS	Score	Vector	Source
3.0	9.8 Critical	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	jpcert

Weaknesses

CWE-489 Active debug code

Affected Products

Product	Versions
home 5G HR02Sharp Corporation	S5.82.00 and earlierAffected
Wi-Fi STATION SH-52BSharp Corporation	S3.87.11 and earlierAffected
Wi-Fi STATION SH-54CSharp Corporation	S6.60.00 and earlierAffected
Wi-Fi STATION SH-05LSharp Corporation	01.00.C0 and earlierAffected
PocketWifi 809SHSharp Corporation	01.00.B9 and earlierAffected
Speed Wi-Fi NEXT W07Sharp Corporation	02.00.48 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.