CVE-2024-46873
Critical
Description
Multiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be executed with the root privilege by a remote unauthenticated attacker.
SeverityCritical
CVSS9.8
Exploit probability—
Producthome 5G HR02
PublishedDec 23, 2024
First seenDec 23, 2024
Weakness typeCWE-489CWE-489
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Sharp Corporation home 5G HR02 | S5.82.00 and earlier | — |
| Sharp Corporation Wi-Fi STATION SH-52B | S3.87.11 and earlier | — |
| Sharp Corporation Wi-Fi STATION SH-54C | S6.60.00 and earlier | — |
| Sharp Corporation Wi-Fi STATION SH-05L | 01.00.C0 and earlier | — |
| Sharp Corporation PocketWifi 809SH | 01.00.B9 and earlier | — |
| Sharp Corporation Speed Wi-Fi NEXT W07 | 02.00.48 and earlier | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.