VulnerabilityDeferred

CVE-2024-52321

Multiple SHARP routers contain an improper authentication vulnerability in the configuration backup function.

MEDIUM 5.9EPSS 0.51%

Does this matter?

Lower severity and a low EPSS score (0.51%). Track it; it rarely justifies an emergency change on its own.

Description

Multiple SHARP routers contain an improper authentication vulnerability in the configuration backup function. The product's backup files containing sensitive information may be retrieved by a remote unauthenticated attacker.

CVSS 3.0: 5.9 MEDIUMCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.51% probability · 42th percentile
CISA KEV: Not listed
Weakness: CWE-497
Source: vultures@jpcert.or.jp

References

https://jvn.jp/en/jp/JVN61635834/
https://k-tai.sharp.co.jp/support/info/info083.html

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.