High severity · published Dec 23, 2024
CVE-2024-45721
home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain an OS command injection vulnerability in the HOST name configuration screen
7.2
CVSS
1.2%
EPSS
No
On KEV
Description
home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain an OS command injection vulnerability in the HOST name configuration screen. An arbitrary OS command may be executed with the root privilege by an administrative user.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WS
Wi-Fi STATION SH-52B · Sharp Corporation
S3.87.11 and earlier · source: vendor
WS
Wi-Fi STATION SH-54C · Sharp Corporation
S6.60.00 and earlier · source: vendor
H5
home 5G HR02 · Sharp Corporation
S5.82.00 and earlier · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-45721
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-45721
jvn.jp
https://jvn.jp/en/jp/JVN61635834/
k-tai.sharp.co.jp
https://k-tai.sharp.co.jp/support/info/info083.html
More from home 5G HR02
9.8
CVE-2024-46873
Multiple SHARP routers leave the hidden debug function enabled
7.2
CVE-2024-54082
home 5G HR02 and Wi-Fi STATION SH-54C contain an OS command injection vulnerability in the configuration restore function
5.9
CVE-2024-52321
Multiple SHARP routers contain an improper authentication vulnerability in the configuration backup function
5.7
CVE-2026-32326
SHARP routers do not perform authentication for some web APIs
5.3
CVE-2024-47864
home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow vulnerability in the hidden debug function