CVE-2023-7077

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-7077
Sharp NEC Displays (P403, P463, P553, P703, P801, X554UN, X464UN, X554UNS, X464UNV, X474HB, X464UNS, X554UNV, X555UNS, X555UNV, X754HB, X554HB, E705, E805, E905, UN551S, UN551VS, X551UHD, X651UHD, X841UHD, X981UHD, MD551C8) allows an attacker execute remote code by sending unintended parameters in http request.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.sharp-nec-displays.com/global/support/info/A4_vulnerability.html Vendor Advisory
https://www.sharp-nec-displays.com/global/support/info/A4_vulnerability.html Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:sharp:nec_e705_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_e705:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:sharp:nec_e805_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_e805:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:sharp:nec_e905_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_e905:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:sharp:nec_md551c8_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_md551c8:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:sharp:nec_p403_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_p403:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:sharp:nec_p463_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_p463:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:sharp:nec_p553_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_p553:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:sharp:nec_p703_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_p703:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:sharp:nec_p801_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_p801:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:sharp:nec_un551s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_un551s:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:sharp:nec_un551vs_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_un551vs:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:sharp:nec_x464un_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x464un:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:sharp:nec_x464uns_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x464uns:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:sharp:nec_x464unv_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x464unv:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:sharp:nec_x474hb_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x474hb:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:sharp:nec_x551uhd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x551uhd:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:sharp:nec_x554hb_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x554hb:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:sharp:nec_x554un_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x554un:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:sharp:nec_x554uns_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x554uns:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:sharp:nec_x554unv_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x554unv:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:sharp:nec_x555uns_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x555uns:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:sharp:nec_x555unv_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x555unv:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:sharp:nec_x651uhd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x651uhd:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:sharp:nec_x754hb_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x754hb:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:sharp:nec_x841uhd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x841uhd:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:sharp:nec_x981uhd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x981uhd:-:*:*:*:*:*:*:*
History

21 Nov 2024, 08:45

Type Values Removed Values Added
References () https://www.sharp-nec-displays.com/global/support/info/A4_vulnerability.html - Vendor Advisory () https://www.sharp-nec-displays.com/global/support/info/A4_vulnerability.html - Vendor Advisory

14 Feb 2024, 19:14

Type Values Removed Values Added
CPE cpe:2.3:h:sharp:nec_e705:-:*:*:*:*:*:*:*
cpe:2.3:o:sharp:nec_e705_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_p801:-:*:*:*:*:*:*:*
cpe:2.3:o:sharp:nec_x554unv_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sharp:nec_p463_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x464un:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_p403:-:*:*:*:*:*:*:*
cpe:2.3:o:sharp:nec_x464unv_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x551uhd:-:*:*:*:*:*:*:*
cpe:2.3:o:sharp:nec_x651uhd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sharp:nec_p703_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x554unv:-:*:*:*:*:*:*:*
cpe:2.3:o:sharp:nec_x555unv_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_e805:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x464uns:-:*:*:*:*:*:*:*
cpe:2.3:o:sharp:nec_md551c8_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sharp:nec_x551uhd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_un551vs:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x554hb:-:*:*:*:*:*:*:*
cpe:2.3:o:sharp:nec_x841uhd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sharp:nec_p801_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sharp:nec_x554uns_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sharp:nec_x474hb_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x651uhd:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_p703:-:*:*:*:*:*:*:*
cpe:2.3:o:sharp:nec_x554un_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sharp:nec_x555uns_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x474hb:-:*:*:*:*:*:*:*
cpe:2.3:o:sharp:nec_p403_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x981uhd:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x841uhd:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_md551c8:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x464unv:-:*:*:*:*:*:*:*
cpe:2.3:o:sharp:nec_x464uns_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sharp:nec_x554hb_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_e905:-:*:*:*:*:*:*:*
cpe:2.3:o:sharp:nec_e905_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sharp:nec_x754hb_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sharp:nec_x464un_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x555unv:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_p463:-:*:*:*:*:*:*:*
cpe:2.3:o:sharp:nec_un551vs_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x554uns:-:*:*:*:*:*:*:*
cpe:2.3:o:sharp:nec_x981uhd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_un551s:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x554un:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x555uns:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_x754hb:-:*:*:*:*:*:*:*
cpe:2.3:o:sharp:nec_un551s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sharp:nec_p553_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sharp:nec_e805_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sharp:nec_p553:-:*:*:*:*:*:*:*
References () https://www.sharp-nec-displays.com/global/support/info/A4_vulnerability.html - () https://www.sharp-nec-displays.com/global/support/info/A4_vulnerability.html - Vendor Advisory
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8
First Time Sharp nec X554un
Sharp nec X464uns
Sharp nec X981uhd Firmware
Sharp nec Un551s Firmware
Sharp nec P403 Firmware
Sharp nec Md551c8
Sharp nec P801
Sharp nec X841uhd Firmware
Sharp
Sharp nec X555uns
Sharp nec X554un Firmware
Sharp nec X551uhd Firmware
Sharp nec P403
Sharp nec X554hb Firmware
Sharp nec X554uns Firmware
Sharp nec P703 Firmware
Sharp nec X754hb Firmware
Sharp nec X464un
Sharp nec X651uhd
Sharp nec X464uns Firmware
Sharp nec Un551s
Sharp nec E805
Sharp nec X554unv Firmware
Sharp nec X464unv
Sharp nec P553 Firmware
Sharp nec X464un Firmware
Sharp nec X651uhd Firmware
Sharp nec X555uns Firmware
Sharp nec E905
Sharp nec P553
Sharp nec Un551vs Firmware
Sharp nec X981uhd
Sharp nec E705 Firmware
Sharp nec X754hb
Sharp nec X464unv Firmware
Sharp nec X554unv
Sharp nec P801 Firmware
Sharp nec X555unv Firmware
Sharp nec X555unv
Sharp nec E705
Sharp nec X554hb
Sharp nec X551uhd
Sharp nec Un551vs
Sharp nec Md551c8 Firmware
Sharp nec X554uns
Sharp nec X474hb
Sharp nec P463
Sharp nec X841uhd
Sharp nec E805 Firmware
Sharp nec P703
Sharp nec E905 Firmware
Sharp nec X474hb Firmware
Sharp nec P463 Firmware

05 Feb 2024, 13:54

Type Values Removed Values Added
Summary
  • (es) Sharp NEC Displays (P403, P463, P553, P703, P801, X554UN, X464UN, X554UNS, X464UNV, X474HB, X464UNS, X554UNV, X555UNS, X555UNV, X754HB, X554HB, E705, E805, E905, UN551 S, UN551VS, X551UHD, X651UHD, X841UHD, X981UHD, MD551C8) permite a un atacante ejecutar código remoto enviando parámetros no deseados en una solicitud http.

05 Feb 2024, 07:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-05 07:15

Updated : 2024-11-21 08:45

NVD link : CVE-2023-7077

Mitre link : CVE-2023-7077

CVE.ORG link : CVE-2023-7077

JSON object : View

Products Affected

sharp

  • nec_p703_firmware
  • nec_p553_firmware
  • nec_x464uns
  • nec_x841uhd_firmware
  • nec_x651uhd
  • nec_x474hb_firmware
  • nec_p553
  • nec_x464un_firmware
  • nec_x554un_firmware
  • nec_x554unv_firmware
  • nec_x555unv
  • nec_x554un
  • nec_un551vs
  • nec_x555uns
  • nec_e705_firmware
  • nec_p403
  • nec_e805
  • nec_e905_firmware
  • nec_x464unv
  • nec_md551c8_firmware
  • nec_x554hb
  • nec_x464uns_firmware
  • nec_un551vs_firmware
  • nec_x464unv_firmware
  • nec_x555unv_firmware
  • nec_x464un
  • nec_p801
  • nec_e905
  • nec_x981uhd_firmware
  • nec_un551s_firmware
  • nec_e805_firmware
  • nec_x554unv
  • nec_x754hb_firmware
  • nec_x554uns
  • nec_p801_firmware
  • nec_x551uhd
  • nec_x555uns_firmware
  • nec_x754hb
  • nec_p403_firmware
  • nec_p463
  • nec_x841uhd
  • nec_e705
  • nec_p703
  • nec_x474hb
  • nec_x981uhd
  • nec_x651uhd_firmware
  • nec_p463_firmware
  • nec_x551uhd_firmware
  • nec_md551c8
  • nec_x554uns_firmware
  • nec_un551s
  • nec_x554hb_firmware
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')