CVE-2024-46873

Published: Dec 23, 2024Modified: Jun 17, 2026Deferred

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: vultures@jpcert.or.jp (Secondary)

Description

Multiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be executed with the root privilege by a remote unauthenticated attacker.

Related CWEs

CWE-489

Active Debug Code

The product is deployed to unauthorized actors with debugging code still enabled or active, which can create unintended entry points or expose sensitive information.

References (2)

https://jvn.jp/en/jp/JVN61635834/

Source: vultures@jpcert.or.jp

https://k-tai.sharp.co.jp/support/info/info083.html

Source: vultures@jpcert.or.jp

Timeline

No history available yet.