OS Command Injection in Sharp 5G HR02 and Wi-Fi STATION SH-54C
CVE-2024-54082
7.2HIGH
Summary
The Sharp 5G HR02 and Wi-Fi STATION SH-54C devices are exposed to a security flaw that allows an administrative user to execute arbitrary OS commands with root privileges through the configuration restore function. This vulnerability could potentially allow attackers to manipulate the device's operating system, posing significant risks to network integrity and user data. It is crucial for users and administrators to apply security best practices and review the official advisories for applicable patches and remediation steps.
Affected Version(s)
home 5G HR02 S5.82.00 and earlier
Wi-Fi STATION SH-54C S6.60.00 and earlier
References
CVSS V3.1
Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved