« Volver al listado

CVE-2024-52321

Estado: AplazadaMedia (5.9)—

Multiple SHARP routers contain an improper authentication vulnerability in the configuration backup function. The product's backup files containing sensitive information may be retrieved by a remote unauthenticated attacker.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Sharp — RouterAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-52321",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-52321",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-12-24T00:31:17.038246Z"
        }
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "vultures@jpcert.or.jp",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 5.9,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.2
      }
    ]
  },
  "affected": [
    {
      "source": "vultures@jpcert.or.jp",
      "affectedData": [
        {
          "vendor": "Sharp Corporation",
          "product": "home 5G HR02",
          "versions": [
            {
              "status": "affected",
              "version": "S5.82.00 and earlier"
            }
          ]
        },
        {
          "vendor": "Sharp Corporation",
          "product": "Wi-Fi STATION SH-52B",
          "versions": [
            {
              "status": "affected",
              "version": "S3.87.11 and earlier"
            }
          ]
        },
        {
          "vendor": "Sharp Corporation",
          "product": "Wi-Fi STATION SH-54C",
          "versions": [
            {
              "status": "affected",
              "version": "S6.60.00 and earlier"
            }
          ]
        },
        {
          "vendor": "Sharp Corporation",
          "product": "Wi-Fi STATION SH-05L",
          "versions": [
            {
              "status": "affected",
              "version": "01.00.C0 and earlier"
            }
          ]
        },
        {
          "vendor": "Sharp Corporation",
          "product": "PocketWifi 809SH",
          "versions": [
            {
              "status": "affected",
              "version": "01.00.B9 and earlier"
            }
          ]
        },
        {
          "vendor": "Sharp Corporation",
          "product": "Speed Wi-Fi NEXT W07",
          "versions": [
            {
              "status": "affected",
              "version": "02.00.48 and earlier"
            }
          ]
        }
      ]
    }
  ],
  "published": "2024-12-23T01:15:07.700",
  "references": [
    {
      "url": "https://jvn.jp/en/jp/JVN61635834/",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "https://k-tai.sharp.co.jp/support/info/info083.html",
      "source": "vultures@jpcert.or.jp"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "vultures@jpcert.or.jp",
      "description": [
        {
          "lang": "en",
          "value": "CWE-497"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple SHARP routers contain an improper authentication vulnerability in the configuration backup function. The product's backup files containing sensitive information may be retrieved by a remote unauthenticated attacker."
    },
    {
      "lang": "es",
      "value": "Varios routers SHARP contienen una vulnerabilidad de autenticación incorrecta en la función de copia de seguridad de la configuración. Un atacante remoto no autenticado puede recuperar los archivos de copia de seguridad del producto que contienen información confidencial."
    }
  ],
  "lastModified": "2026-06-17T08:07:00.643",
  "sourceIdentifier": "vultures@jpcert.or.jp"
}