CVE-2025-12049

critical · 9.2

Missing Authentication for Critical Function vulnerability in Sharp Display Solutions Media Player MP-01 All Verisons allows a attacker may access to the web interface of the affected product without authentication and change settings or perform other operations, and deliver content from the authoring software to the affected product without authentication.

9.2

CVSS

0.3%

EPSS (exploit prob.)

25th

EPSS percentile

2025-12-22

Published

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-306

Affected products

Vendor	Product	Affected versions
sharp	mp-01_firmware	all versions
sharp	mp-01	all versions

Check a specific version with /api/v1/cve/match.

References

https://sharp-displays.jp.sharp/global/support/info/MP01-CVE-2025-12049.html

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-12049