CVE-2023-7077

Published: Feb 5, 2024Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Sharp NEC Displays (P403, P463, P553, P703, P801, X554UN, X464UN, X554UNS, X464UNV, X474HB, X464UNS, X554UNV, X555UNS, X555UNV, X754HB, X554HB, E705, E805, E905, UN551S, UN551VS, X551UHD, X651UHD, X841UHD, X981UHD, MD551C8) allows an attacker execute remote code by sending unintended parameters in http request.

Affected (26)

Products: Sharp: Nec E705 Firmware, Nec E805 Firmware, Nec E905 Firmware, Nec Md551c8 Firmware, Nec P403 Firmware, Nec P463 Firmware, Nec P553 Firmware, Nec P703 Firmware, Nec P801 Firmware, Nec Un551s Firmware, Nec Un551vs Firmware, Nec X464un Firmware, Nec X464uns Firmware, Nec X464unv Firmware, Nec X474hb Firmware, Nec X551uhd Firmware, Nec X554hb Firmware, Nec X554un Firmware, Nec X554uns Firmware, Nec X554unv Firmware, Nec X555uns Firmware, Nec X555unv Firmware, Nec X651uhd Firmware, Nec X754hb Firmware, Nec X841uhd Firmware, Nec X981uhd Firmware

26 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sharp Nec E705 Firmware	All versions

Running on/with	Platform Versions
Sharp Nec E705	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sharp Nec E805 Firmware	All versions

Running on/with	Platform Versions
Sharp Nec E805	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sharp Nec E905 Firmware	All versions

Running on/with	Platform Versions
Sharp Nec E905	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sharp Nec Md551c8 Firmware	All versions

Running on/with	Platform Versions
Sharp Nec Md551c8	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sharp Nec P403 Firmware	All versions

Running on/with	Platform Versions
Sharp Nec P403	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sharp Nec P463 Firmware	All versions

Running on/with	Platform Versions
Sharp Nec P463	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sharp Nec P553 Firmware	All versions

Running on/with	Platform Versions
Sharp Nec P553	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sharp Nec P703 Firmware	All versions

Running on/with	Platform Versions
Sharp Nec P703	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sharp Nec P801 Firmware	All versions

Running on/with	Platform Versions
Sharp Nec P801	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sharp Nec Un551s Firmware	All versions

Running on/with	Platform Versions
Sharp Nec Un551s	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sharp Nec Un551vs Firmware	All versions

Running on/with	Platform Versions
Sharp Nec Un551vs	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sharp Nec X464un Firmware	All versions

Running on/with	Platform Versions
Sharp Nec X464un	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sharp Nec X464uns Firmware	All versions

Running on/with	Platform Versions
Sharp Nec X464uns	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sharp Nec X464unv Firmware	All versions

Running on/with	Platform Versions
Sharp Nec X464unv	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sharp Nec X474hb Firmware	All versions

Running on/with	Platform Versions
Sharp Nec X474hb	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sharp Nec X551uhd Firmware	All versions

Running on/with	Platform Versions
Sharp Nec X551uhd	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sharp Nec X554hb Firmware	All versions

Running on/with	Platform Versions
Sharp Nec X554hb	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sharp Nec X554un Firmware	All versions

Running on/with	Platform Versions
Sharp Nec X554un	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sharp Nec X554uns Firmware	All versions

Running on/with	Platform Versions
Sharp Nec X554uns	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sharp Nec X554unv Firmware	All versions

Running on/with	Platform Versions
Sharp Nec X554unv	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sharp Nec X555uns Firmware	All versions

Running on/with	Platform Versions
Sharp Nec X555uns	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sharp Nec X555unv Firmware	All versions

Running on/with	Platform Versions
Sharp Nec X555unv	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sharp Nec X651uhd Firmware	All versions

Running on/with	Platform Versions
Sharp Nec X651uhd	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sharp Nec X754hb Firmware	All versions

Running on/with	Platform Versions
Sharp Nec X754hb	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sharp Nec X841uhd Firmware	All versions

Running on/with	Platform Versions
Sharp Nec X841uhd	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sharp Nec X981uhd Firmware	All versions

Running on/with	Platform Versions
Sharp Nec X981uhd	All versions

Related CWEs

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (2)

https://sharp-displays.jp.sharp/global/support/info/A4_vulnerability.html

Source: psirt-info@cyber.jp.nec.com

https://www.sharp-nec-displays.com/global/support/info/A4_vulnerability.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.