Improper Authentication Vulnerability in SHARP Routers
CVE-2024-52321
Summary
Multiple SHARP routers have been identified with an improper authentication flaw within the configuration backup utility. This vulnerability allows remote unauthenticated attackers to access configuration backup files, which may contain sensitive information critical for network security. The issue arises from inadequate restrictions placed on the access and retrieval of these backup files, posing a significant risk to users' data integrity. It is crucial for organizations using these devices to implement mitigation strategies and follow security best practices to safeguard against potential exploitation.
Affected Version(s)
home 5G HR02 S5.82.00 and earlier
PocketWifi 809SH 01.00.B9 and earlier
Speed Wi-Fi NEXT W07 02.00.48 and earlier
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved