CVE-2025-11540 (GCVE-0-2025-11540)
Vulnerability from cvelistv5 – Published: 2025-12-22 05:07 – Updated: 2025-12-22 17:06 Unsupported When Assigned
VLAI?
Summary
Path Traversal vulnerability in Sharp Display Solutions projectors allows a attacker may access and read any files within the projector.
Severity ?
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
References
Impacted products
Credits
Sebastian Pahl of University Luxembourg
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-11540",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-12-22T17:06:19.908109Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-12-22T17:06:40.735Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "NP-P502HL-2, NP-P502WL-2, NP-P502HLG-2, NP-P502WLG, NP-P502H, NP-P502W, NP-P452H, NP-P452W, NP-P502HG, NP-P502WG, NP-P452HG, NP-P452WG, NP-P502H+, NP-P502W+, NP-CR5450H, NP-CR5450W, NP-P502HL, NP-P502WL, NP-P502HLG, NP-P502WLG, NP-P502HL+, NP-P502WL+, NP-CR5450HL, NP-CR5450WL, NP-UM352W, NP-UM352WG, NP-UM352W+",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"user": "00000000-0000-4000-9000-000000000000",
"value": "Sebastian Pahl of University Luxembourg"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Path Traversal vulnerability in Sharp Display Solutions projectors allows a attacker may access and read any files within the projector."
}
],
"value": "Path Traversal vulnerability in Sharp Display Solutions projectors allows a attacker may access and read any files within the projector."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-12-22T05:07:30.369Z",
"orgId": "f2760a35-e0d8-4637-ac4c-cc1a2de3e282",
"shortName": "NEC"
},
"references": [
{
"url": "https://sharp-displays.jp.sharp/global/support/info/PJ-CVE-2025-11540.html"
}
],
"source": {
"discovery": "EXTERNAL"
},
"tags": [
"unsupported-when-assigned"
],
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "f2760a35-e0d8-4637-ac4c-cc1a2de3e282",
"assignerShortName": "NEC",
"cveId": "CVE-2025-11540",
"datePublished": "2025-12-22T05:07:30.369Z",
"dateReserved": "2025-10-09T06:46:38.729Z",
"dateUpdated": "2025-12-22T17:06:40.735Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2025-11540\",\"sourceIdentifier\":\"psirt-info@cyber.jp.nec.com\",\"published\":\"2025-12-22T05:16:06.807\",\"lastModified\":\"2026-01-15T20:27:31.827\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[{\"sourceIdentifier\":\"psirt-info@cyber.jp.nec.com\",\"tags\":[\"unsupported-when-assigned\"]}],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Path Traversal vulnerability in Sharp Display Solutions projectors allows a attacker may access and read any files within the projector.\"}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"psirt-info@cyber.jp.nec.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":9.1,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"PRESENT\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"NONE\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"psirt-info@cyber.jp.nec.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-22\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sharp:np-p502h_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EA69E996-0284-4FEE-B15F-E5257A262794\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sharp:np-p502h:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"24783AAF-8F17-4247-88DD-B7BEE1C2DDAF\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sharp:np-p502w_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EECEFD65-FFAD-4326-A712-DAB7B9B7756E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sharp:np-p502w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E290E2BC-5FD0-43B2-BD46-F0597713AF45\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sharp:np-p452h_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FEBFCC3E-DEEB-4D5E-BD7B-E2F0F106AD14\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sharp:np-p452h:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"20D079AC-E0F6-42D2-A19E-FE7804F28EDB\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sharp:np-p452w_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E14B431A-0AA4-4434-8EB7-5E57995C1674\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sharp:np-p452w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BCEAAE7D-950E-4E54-8BED-9AA0607E8223\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sharp:np-p502hg_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"539A3D60-4FAF-409D-92EB-19E81FC899FC\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sharp:np-p502hg:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DBE760E8-7D8D-41AC-8B02-5586A9C1810C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sharp:np-p502wg_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F8810AC6-5B69-45DF-8072-FD897F72BC74\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sharp:np-p502wg:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"41149CA5-05EC-45DB-A535-3765D3A1C96A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sharp:np-p452hg_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6C8A77D2-E2EC-4EAE-89AE-F7A280968B31\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sharp:np-p452hg:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6C3E0E04-D787-451B-820B-74FAA99EE453\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sharp:np-p452wg_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E24B3FA7-5AC7-4267-8E7A-843882475218\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sharp:np-p452wg:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C4D69EBC-EB3C-4D0F-A227-6DAFE8D23153\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sharp:np-p502h\\\\+_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"75B96C1A-10F9-423E-B2A8-759C293DF5D4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sharp:np-p502h\\\\+:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BDF704F2-0955-418B-976F-ACC61E453217\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sharp:np-p502w\\\\+_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1F0D58EF-03B6-46B6-8060-31DCE7D7388F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sharp:np-p502w\\\\+:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B1B48BE-90B5-46D7-BFAD-17D7B106B83E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sharp:np-cr5450h_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2C03400D-6B15-4975-896B-FE7FA8BF9DBF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sharp:np-cr5450h:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"90A1016D-D562-46B3-B648-E2C98B64880B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sharp:np-cr5450w_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"067E54F0-F766-493C-886C-EF39C7125DCB\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sharp:np-cr5450w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8DA486A6-8608-4520-A526-68E257E670F0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sharp:np-p502hl_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F20F941C-A0A1-42AB-94D4-B79D6F647A99\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sharp:np-p502hl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B3B4E54-79B7-46EC-937D-3E2CF2CEE7A9\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sharp:np-p502wl_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1772262E-2F6E-418D-8C2F-3ED90FCB49E7\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sharp:np-p502wl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8330E757-69AE-4820-BCC0-EAE2C023A067\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sharp:np-p502hlg_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"44004691-BB01-41EA-BC2A-B9F97B001E73\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sharp:np-p502hlg:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"82E4B7A8-C5CA-4876-94E7-2BBDFC327CB6\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sharp:np-p502wlg_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"96F948BB-F09A-41D9-B2F9-139FDC1CAEC1\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sharp:np-p502wlg:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DFBB2BCD-C1B9-42E6-8152-34D65C70A943\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sharp:np-p502hl\\\\+_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4B15AE24-6A0F-4D2F-8CFF-31CFE94FA54D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sharp:np-p502hl\\\\+:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7C94D019-2576-495C-A409-89281278DF36\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sharp:np-p502wl\\\\+_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7B224D56-642F-431F-9BD7-AAE5E421309C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sharp:np-p502wl\\\\+:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F839D9D8-69E7-4CCB-B261-5FDBED47E8C6\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sharp:np-cr5450hl_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8C165FFA-7297-4799-AA4D-5D0A1DD2C08F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sharp:np-cr5450hl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2C6D48E-8278-4455-9702-E21D2386FFCA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sharp:np-cr5450wl_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1E3EA328-9B88-4D4F-A542-3128F68EDBF1\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sharp:np-cr5450wl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3E4B1C29-1C7C-4B04-BACD-27578F6DC901\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sharp:np-p502hl-2_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4F39EB79-C6DB-497F-A8B0-8FC862430937\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sharp:np-p502hl-2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F628BBDB-BD1E-4207-BEBF-10286BB682BC\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sharp:np-p502wl-2_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"04D73404-348B-4D29-8B5D-F35B5D72F7CF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sharp:np-p502wl-2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0BDD6A2A-0975-4327-B77D-69CD1657CE41\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sharp:np-p502hlg-2_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F0676614-BC86-4FD5-BA0D-657433A410E7\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sharp:np-p502hlg-2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5BBA55A4-5C2D-48CB-BA98-66818D481C8B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sharp:np-p502wlg_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"96F948BB-F09A-41D9-B2F9-139FDC1CAEC1\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sharp:np-p502wlg:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DFBB2BCD-C1B9-42E6-8152-34D65C70A943\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sharp:np-um352w_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1692284A-162D-4123-8E60-3C816FA1177A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sharp:np-um352w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"23197D80-E9A7-4F19-8F0F-FE74C3F86E16\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sharp:np-um352wg_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F7989B6-37DD-4C8D-8435-350E0151BAC3\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sharp:np-um352wg:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C3379F7-4982-4765-8D06-F16C51F65743\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sharp:np-um352w\\\\+_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F24F7AF-5C49-48EC-943B-DDDDC0646248\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sharp:np-um352w\\\\+:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F10B17DC-C1C7-414E-831C-7AF08DB8DCA6\"}]}]}],\"references\":[{\"url\":\"https://sharp-displays.jp.sharp/global/support/info/PJ-CVE-2025-11540.html\",\"source\":\"psirt-info@cyber.jp.nec.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-11540\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-12-22T17:06:19.908109Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-12-22T17:06:36.868Z\"}}], \"cna\": {\"tags\": [\"unsupported-when-assigned\"], \"source\": {\"discovery\": \"EXTERNAL\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"reporter\", \"user\": \"00000000-0000-4000-9000-000000000000\", \"value\": \"Sebastian Pahl of University Luxembourg\"}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV4_0\": {\"version\": \"4.0\", \"baseScore\": 9.1, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"valueDensity\": \"NOT_DEFINED\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N\", \"exploitMaturity\": \"NOT_DEFINED\", \"providerUrgency\": \"NOT_DEFINED\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"PRESENT\", \"privilegesRequired\": \"NONE\", \"subIntegrityImpact\": \"NONE\", \"vulnIntegrityImpact\": \"HIGH\", \"subAvailabilityImpact\": \"NONE\", \"vulnAvailabilityImpact\": \"NONE\", \"subConfidentialityImpact\": \"NONE\", \"vulnConfidentialityImpact\": \"HIGH\", \"vulnerabilityResponseEffort\": \"NOT_DEFINED\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Sharp Display Solutions, Ltd.\", \"product\": \"NP-P502HL-2, NP-P502WL-2, NP-P502HLG-2, NP-P502WLG, NP-P502H, NP-P502W, NP-P452H, NP-P452W, NP-P502HG, NP-P502WG, NP-P452HG, NP-P452WG, NP-P502H+, NP-P502W+, NP-CR5450H, NP-CR5450W, NP-P502HL, NP-P502WL, NP-P502HLG, NP-P502WLG, NP-P502HL+, NP-P502WL+, NP-CR5450HL, NP-CR5450WL, NP-UM352W, NP-UM352WG, NP-UM352W+\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions\"}], \"defaultStatus\": \"unknown\"}], \"references\": [{\"url\": \"https://sharp-displays.jp.sharp/global/support/info/PJ-CVE-2025-11540.html\"}], \"x_generator\": {\"engine\": \"Vulnogram 0.5.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"Path Traversal vulnerability in Sharp Display Solutions projectors allows a attacker may access and read any files within the projector.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Path Traversal vulnerability in Sharp Display Solutions projectors allows a attacker may access and read any files within the projector.\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-22\", \"description\": \"CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"f2760a35-e0d8-4637-ac4c-cc1a2de3e282\", \"shortName\": \"NEC\", \"dateUpdated\": \"2025-12-22T05:07:30.369Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2025-11540\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-12-22T17:06:40.735Z\", \"dateReserved\": \"2025-10-09T06:46:38.729Z\", \"assignerOrgId\": \"f2760a35-e0d8-4637-ac4c-cc1a2de3e282\", \"datePublished\": \"2025-12-22T05:07:30.369Z\", \"assignerShortName\": \"NEC\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…