PT-2024-10302 · Sharp · Sharp Routers

Shuto Imai · Published 2024-12-05 · Updated 2024-12-23 · CVE-2024-46873

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SHARP routers (affected versions not specified)

Description The issue is related to a hidden debug function that is enabled in multiple SHARP routers, allowing an arbitrary OS command to be executed with root privilege by a remote unauthenticated attacker. This is due to insufficient protection of service data in the implementation of the debug code. The exploitation of this issue may allow a remote attacker to elevate their privileges and execute arbitrary commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-489

Related Identifiers

BDU:2025-00731

CVE-2024-46873

Affected Products

Sharp Routers

References · 13

• https://bdu.fstec.ru/vul/2025-00731 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-46873 · Security Note
• https://twitter.com/gbhackers_news/status/1871094807537553898 · Twitter Post
• https://t.me/cvenotify/105266 · Telegram Post
• https://twitter.com/The_Cyber_News/status/1871094718551220698 · Twitter Post
• https://k-tai.sharp.co.jp/support/info/info083.html · Note
• https://twitter.com/CVEnew/status/1871018089082679510 · Twitter Post
• https://vuldb.com/?id.289178 · Note
• https://t.me/cvedetector/13524 · Telegram Post
• https://twitter.com/the_yellow_fall/status/1869198089233580410 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1871016107387027564 · Twitter Post
• https://jvn.jp/en/jp/JVN61635834 · Note
• https://twitter.com/CveFindCom/status/1870998083955310966 · Twitter Post