CVE-2023-7077CWE-22

Sharp NEC Displays (P403, P463, P553, P703, P801, X554UN, X464UN, X554UNS, X464UNV, X474HB, X464UNS, X554UNV, X555UNS, X555UNV, X754HB, X554HB, E705, E805…

Critical · published February 5, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
52.4
In the wild
Unconfirmed
What it is

🔥 An HTTP request with unexpected parameters is all it takes to unlock the door to full remote code execution in Sharp NEC Displays! 🚨 Think of it like a restaurant where the chef takes orders but doesn't check if the ingredients are actually in stock. An attacker can just shout a command, and poof! They've created their own special dish without any oversight. This vulnerability could allow an attacker to execute arbitrary code, leading to unauthorized access, data manipulation, or even taking complete control of the display devices. Imagine a rogue chef completely reworking the restaurant menu to serve up malicious intent—absolutely devastating!

Put simply

Think of it like a restaurant where the chef takes orders but doesn't check if the ingredients are actually in stock. An attacker can just shout a command, and poof! They've created their own special dish without any oversight. The vulnerability stems from a failure to properly validate parameters in HTTP requests, allowing attackers to send crafted data to the Sharp NEC displays, leading to remote code execution.

What to do

This vulnerability could allow an attacker to execute arbitrary code, leading to unauthorized access, data manipulation, or even taking complete control of the display devices. Imagine a rogue chef completely reworking the restaurant menu to serve up malicious intent—absolutely devastating! To safeguard your displays, it's crucial to apply the latest firmware updates provided by Sharp NEC immediately. Additionally, implement strict input validation to prevent unintended commands from being executed. Regularly audit device configurations to ensure security best practices are followed. You've got this! Take these steps and you'll be the hero who secures the displays! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00694 · 52.4th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2024-02-05T06:57Z
EPSS history
Timeline
  • 05 FEB 06:57Z
    Sharp NEC Displays (P403, P463, P553, P703, P801, X554UN, X464UN, X554UNS, X464UNV, X474HB, X464UNS, X554UNV, X555UNS, X555UNV, X754HB, X554HB, E705, E805…
    cvelistv5