PT-2020-18546 · Sharp · Sharp Aquos Mini Sh-M03+10

Published 2020-04-23 · Updated 2020-04-30 · CVE-2020-5571

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SHARP AQUOS series versions 01.00.05 and earlier SHARP AQUOS SH-RM02 versions 01.00.04 and earlier SHARP AQUOS mini SH-M03 versions 01.00.04 and earlier SHARP AQUOS Keitai SH-N01 versions 01.00.01 and earlier SHARP AQUOS L2 (UQ mobile/J:COM) versions 01.00.05 and earlier SHARP AQUOS sense lite SH-M05 versions 03.00.04 and earlier SHARP AQUOS sense (UQ mobile) versions 03.00.03 and earlier SHARP AQUOS compact SH-M06 versions 02.00.02 and earlier SHARP AQUOS sense plus SH-M07 versions 02.00.02 and earlier SHARP AQUOS sense2 SH-M08 versions 02.00.05 and earlier SHARP AQUOS sense2 (UQ mobile) versions 02.00.06 and earlier

Description The issue allows an attacker to obtain sensitive information of the device via malicious applications installed on the device.

Recommendations For SHARP AQUOS series versions 01.00.05 and earlier, update to a version later than 01.00.05. For SHARP AQUOS SH-RM02 versions 01.00.04 and earlier, update to a version later than 01.00.04. For SHARP AQUOS mini SH-M03 versions 01.00.04 and earlier, update to a version later than 01.00.04. For SHARP AQUOS Keitai SH-N01 versions 01.00.01 and earlier, update to a version later than 01.00.01. For SHARP AQUOS L2 (UQ mobile/J:COM) versions 01.00.05 and earlier, update to a version later than 01.00.05. For SHARP AQUOS sense lite SH-M05 versions 03.00.04 and earlier, update to a version later than 03.00.04. For SHARP AQUOS sense (UQ mobile) versions 03.00.03 and earlier, update to a version later than 03.00.03. For SHARP AQUOS compact SH-M06 versions 02.00.02 and earlier, update to a version later than 02.00.02. For SHARP AQUOS sense plus SH-M07 versions 02.00.02 and earlier, update to a version later than 02.00.02. For SHARP AQUOS sense2 SH-M08 versions 02.00.05 and earlier, update to a version later than 02.00.05. For SHARP AQUOS sense2 (UQ mobile) versions 02.00.06 and earlier, update to a version later than 02.00.06.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2020-5571

Affected Products

Sharp Aquos Keitai Sh-N01

Sharp Aquos L2

Sharp Aquos Sh-Rm02

Sharp Aquos Compact Sh-M06

Sharp Aquos Mini Sh-M03

Sharp Aquos Sense

Sharp Aquos Sense Lite Sh-M05

Sharp Aquos Sense Plus Sh-M07

Sharp Aquos Sense2

Sharp Aquos Sense2 Sh-M08

Sharp Aquos Series

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-5571 · Security Note
• https://osv.dev/vulnerability/CVE-2020-5571 · Vendor Advisory
• https://k-tai.sharp.co.jp/support/info/info036.html · Note
• https://jvn.jp/en/jp/JVN93064451/index.html · Note
• https://t.me/cvenotify/3090 · Telegram Post