CVE-2023-7077

high-risk
Published 2024-02-05

Sharp NEC Displays (P403, P463, P553, P703, P801, X554UN, X464UN, X554UNS, X464UNV, X474HB, X464UNS, X554UNV, X555UNS, X555UNV, X754HB, X554HB, E705, E805, E905, UN551S, UN551VS, X551UHD, X651UHD, X841UHD, X981UHD, MD551C8) allows an attacker execute remote code by sending unintended parameters in http request.

Do I need to act?

-
0.75% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (20)

Nec E705 Firmware
Nec E805 Firmware
Nec E905 Firmware
Nec Md551C8 Firmware
Nec P403 Firmware
Nec P463 Firmware
Nec P553 Firmware
Nec P703 Firmware
Nec P801 Firmware
Nec Un551S Firmware
Nec Un551Vs Firmware
Nec X464Un Firmware
Nec X464Uns Firmware
Nec X464Unv Firmware
Nec X474Hb Firmware
Nec X551Uhd Firmware
Nec X554Hb Firmware
Nec X554Un Firmware
Nec X554Uns Firmware
Nec X554Unv Firmware

Affected Vendors

56
/ 100
high-risk
Severity 32/34 · Critical
Exploitability 3/34 · Minimal
Exposure 21/34 · High