Local File Inclusion in Sharp NEC Display Solutions products - CVE-2023-7077

Vulnerability identifier: #VU86167

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-7077

CWE-ID: CWE-94

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to improper input validation. A remote attacker can send a specially crafted request and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

X555UNV
MD551C8
X981UHD
X841UHD
X651UHD
X551UHD
UN551VS
UN551S
E905
E805
E705
X554HB
X754HB
P403
X555UNS
X554UNV
X464UNS
X474HB
X464UNV
X554UNS
X464UN
X554UN
P801
P703
P553
P463

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

• https://www.sharp-nec-displays.com/global/support/info/A4_vulnerability.html
• https://jvn.jp/en/vu/JVNVU97836276/index.html

• Local File Inclusion in Sharp NEC Display Solutions Public Displays