#VU27241 Information disclosure in Sharp Corporation products - CVE-2020-5571

Vulnerability identifier: #VU27241

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2020-5571

CWE-ID: CWE-200

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
AQUOS SH-M02
AQUOS SH-RM02
AQUOS mini SH-M03
AQUOS Keitai SH-N01
AQUOS L2 (UQ mobile/J:COM)
AQUOS sense lite SH-M05
AQUOS sense (UQ mobile)
AQUOS compact SH-M06
AQUOS sense plus SH-M07
AQUOS sense2 SH-M08
AQUOS sense2 (UQ mobile)

Software vendor:
Sharp Corporation

The vulnerability allows a local attacker to gain access to potentially sensitive information.

The vulnerability exists due to information disclosure issue in multiple SHARP Android devices. A local attacker can trick a victim to install a malicious appllication and gain unauthorized access to sensitive information on the system.

Install updates from vendor's website.

• https://jvn.jp/en/jp/JVN93064451/index.html
• http://k-tai.sharp.co.jp/support/info/info036.html