{"cve":"CVE-2025-11543","nvd":{"published":"2025-12-22T05:16:18.777","modified":"2026-06-17T08:30:40.323","status":"Analyzed","description":"Improper Validation of Integrity Check Value vulnerability in Sharp Display Solutions projectors allows a attacker may create and run unauthorized firmware.","cvss_v4":{"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","score":9.5},"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8},"cwes":["CWE-354"],"references":["https://sharp-displays.jp.sharp/global/support/info/PJ-CVE-2025-11540.html"],"products":["sharp:np-cr5450h_firmware","sharp:np-cr5450hl_firmware","sharp:np-cr5450w_firmware","sharp:np-cr5450wl_firmware","sharp:np-p452h_firmware","sharp:np-p452hg_firmware","sharp:np-p452w_firmware","sharp:np-p452wg_firmware","sharp:np-p502h\\+_firmware","sharp:np-p502h_firmware","sharp:np-p502hg_firmware","sharp:np-p502hl-2_firmware","sharp:np-p502hl\\+_firmware","sharp:np-p502hl_firmware","sharp:np-p502hlg-2_firmware","sharp:np-p502hlg_firmware","sharp:np-p502w\\+_firmware","sharp:np-p502w_firmware","sharp:np-p502wg_firmware","sharp:np-p502wl-2_firmware","sharp:np-p502wl\\+_firmware","sharp:np-p502wl_firmware","sharp:np-p502wlg_firmware","sharp:np-um352w\\+_firmware","sharp:np-um352w_firmware","sharp:np-um352wg_firmware"],"source":"nvd","synced_at":"2026-10-19T22:17:07.138532058+00:00"},"epss":{"cve":"CVE-2025-11543","score":0.00199,"percentile":0.09763,"date":"2026-11-01"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}