CVE-2023-7077
Critical
Description
Sharp NEC Displays (P403, P463, P553, P703, P801, X554UN, X464UN, X554UNS, X464UNV, X474HB, X464UNS, X554UNV, X555UNS, X555UNV, X754HB, X554HB, E705, E805, E905, UN551S, UN551VS, X551UHD, X651UHD, X841UHD, X981UHD, MD551C8) allows an attacker execute remote code by sending unintended parameters in http request.
SeverityCritical
CVSS9.8
Exploit probability—
ProductSharp Nec E705 Firmware
PublishedFeb 5, 2024
First seenFeb 5, 2024
Weakness typeCWE-22Path traversal
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sharp nec_e705_firmware | No range specified | — |
| sharp nec_e805_firmware | No range specified | — |
| sharp nec_e905_firmware | No range specified | — |
| sharp nec_md551c8_firmware | No range specified | — |
| sharp nec_p403_firmware | No range specified | — |
| sharp nec_p463_firmware | No range specified | — |
| sharp nec_p553_firmware | No range specified | — |
| sharp nec_p703_firmware | No range specified | — |
| sharp nec_p801_firmware | No range specified | — |
| sharp nec_un551s_firmware | No range specified | — |
| sharp nec_un551vs_firmware | No range specified | — |
| sharp nec_x464un_firmware | No range specified | — |
| sharp nec_x464uns_firmware | No range specified | — |
| sharp nec_x464unv_firmware | No range specified | — |
| sharp nec_x474hb_firmware | No range specified | — |
| sharp nec_x551uhd_firmware | No range specified | — |
| sharp nec_x554hb_firmware | No range specified | — |
| sharp nec_x554un_firmware | No range specified | — |
| sharp nec_x554uns_firmware | No range specified | — |
| sharp nec_x554unv_firmware | No range specified | — |
| sharp nec_x555uns_firmware | No range specified | — |
| sharp nec_x555unv_firmware | No range specified | — |
| sharp nec_x651uhd_firmware | No range specified | — |
| sharp nec_x754hb_firmware | No range specified | — |
| sharp nec_x841uhd_firmware | No range specified | — |
| sharp nec_x981uhd_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.