CVE-2025-12049

CRITICAL

9.8

Beschreibung

Missing Authentication for Critical Function vulnerability in Sharp Display Solutions Media Player MP-01 All Verisons allows a attacker may access to the web interface of the affected product without authentication and change settings or perform other operations, and deliver content from the authoring software to the affected product without authentication.

CVE Details

CVSS v3.1 Bewertung9.8

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht12/22/2025

Zuletzt geandert1/15/2026

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

sharp:mp-01sharp:mp-01_firmware

Schwachen (CWE)

CWE-306

Referenzen

https://sharp-displays.jp.sharp/global/support/info/MP01-CVE-2025-12049.html(psirt-info@cyber.jp.nec.com)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.