Multiple Sharp Devices DLL Loading Remote Code Execution Vulnerability

Bugtraq ID:	99290
Class:	Design Error
CVE:	CVE-2017-2189 CVE-2017-2190 CVE-2017-2191 CVE-2017-2192
Remote:	Yes
Local:	No
Published:	Jun 27 2017 12:00AM
Updated:	Jun 27 2017 12:00AM
Credit:	Yuji Tounai of NTT Communications Corporation.
Vulnerable:	Sharp Corporation RW-5100 1.2.0.0 Sharp Corporation RW-5100 1.1.0.0 Sharp Corporation RW-5100 1.0.1.0 Sharp Corporation RW-5100 1.0.0.9 Sharp Corporation RW-4040 2.27 Sharp Corporation RW-4040 1.2.0.0
Not Vulnerable:	Sharp Corporation RW-5100 1.0.1.0A Sharp Corporation RW-5100 1.0.0.9A Sharp Corporation RW-4040 2.27A

Multiple Sharp Devices DLL Loading Remote Code Execution Vulnerability

Multiple Sharp Devices are prone to a remote code-execution vulnerability.

A remote attacker can leverage this issue to execute arbitrary code in the context of the affected application.

Multiple Sharp Devices DLL Loading Remote Code Execution Vulnerability

Attackers must trick a user into opening a file on a remote WebDAV or SMB share to exploit this issue.

A general exploit technique has been documented by TheLeader and H.D. Moore for the Metasploit Project; please see the references for more information.

Multiple Sharp Devices DLL Loading Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple Sharp Devices DLL Loading Remote Code Execution Vulnerability

References:

• Exploiting DLL Hijacking Flaws (hdm)
  
• More information about the DLL Preloading remote attack vector (Microsoft)
  
• SHARP Homepage (SHARP)
  
• JVN#51274854 Multiple software for Sharp IC Card Reader/Writer Devices may insec (JPCERT)