CVE-2025-11540CWE-22

Path Traversal vulnerability in Sharp Display Solutions projectors allows a attacker may access and read any files within the projector

Critical · published December 22, 2025

CVSS v4.0
9.1
EPSS
0%
Percentile
33.0
In the wild
Unconfirmed
What it is

🚨 A sneaky path traversal vulnerability in Sharp Display Solutions projectors lets attackers peek into any file they want — it’s like giving someone a backstage pass to all your secrets! 🔥 Think of it as a delivery service that, instead of just dropping off packages at your office, starts rummaging through all your files and folders, leaving everything open for grabs. This flaw allows anyone with access to the projector's input to explore its entire file system without proper checks. An attacker could gain access to sensitive files, potentially exposing confidential data, firmware settings, or even revealing routes to further attacks. This could lead to a total information breach, making the projector an unwitting accomplice in data theft. The implications are absolutely devastating, especially in environments where security is paramount!

Put simply

Think of it as a delivery service that, instead of just dropping off packages at your office, starts rummaging through all your files and folders, leaving everything open for grabs. This flaw allows anyone with access to the projector's input to explore its entire file system without proper checks. This path traversal vulnerability arises from insufficient validation of user input, allowing an attacker to manipulate file paths and access files outside of the intended directories within the projector’s filesystem.

What to do

An attacker could gain access to sensitive files, potentially exposing confidential data, firmware settings, or even revealing routes to further attacks. This could lead to a total information breach, making the projector an unwitting accomplice in data theft. The implications are absolutely devastating, especially in environments where security is paramount! Immediate action is imperative: Update to the latest firmware version released by Sharp that addresses this vulnerability. Additionally, ensure that all user input handling within projector settings is properly validated to prevent such exploits in the future. You've got this! Take these steps to lock down your projectors and reclaim your data’s safety! 🛡️

The record
Technical detail
CVSS v4.0
9.1 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00399 · 33.0th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2025-12-22T05:07Z
EPSS history
Timeline
  • 22 DEC 05:07Z
    Path Traversal vulnerability in Sharp Display Solutions projectors allows a attacker may access and read any files within the projector
    cvelistv5