External risk intelligence

Sharp MP-01 Media Player Unauthenticated Web Interface Access

CVE advisorySeverity: CRITICAL (CVSS 9.2)

CVE-2025-12049

The vulnerability affects a media player's web interface, which is designed to be remotely managed and configured. While often deployed within private networks, such devices are frequently exposed to the internet in commercial settings like digital signage networks to facilitate remote content updates and management.

Missing Authentication

Sharp Mp 01 Firmware

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

External exposure likelihood

Horizon Alert

Summary of the vulnerability and why it matters

A critical vulnerability exists in Sharp Display Solutions Media Player MP-01 devices, allowing unauthorized access to the web interface. This could enable attackers to change settings, perform operations, and deliver unauthorized content to the media players. The main concern is confirming relevance and exposure.

Unauthenticated access to device settings and content.
Protects against unauthorized control and content delivery.
Verify if this media player is in use.

Attack Path

How an attacker could exploit the issue

Attackers can access the media player's web interface without needing any credentials. This allows them to change settings, perform other operations, and push content to the device.

Unauthenticated remote access to web interface.
Malicious actors can alter settings.
Unauthorized content delivery possible.

Live Threat

Current exploitation, exposure, and threat context

This vulnerability could allow an unauthenticated attacker to access the web interface of the Sharp Display Solutions Media Player MP-01. When supported, this could lead to unauthorized changes to settings, performing other operations, and delivering content from authoring software to the affected product.

Unauthenticated access to web interface.
Attackers could change settings or deliver content.
Unauthorized control of device operations.

Operational Fix

Recommended remediation, mitigation, and detection steps

This vulnerability likely impacts teams responsible for digital signage and content delivery, including potentially application owners, infrastructure, and network/security teams. The first practical step is to locate all instances of the affected media player, assess their network exposure and business criticality, identify the accountable owner, and then plan remediation based on risk.

Identify accountable teams for media players.
Verify network exposure and business impact.
Plan remediation based on identified risk.

Supplementary metadata

CVSS vector

Validate whether this threat affects your internet-facing exposure.

Halo Threat Intelligence helps prioritize remediation with Halo Surface Signal and H/A/L/O context. Start exposure validation with a free external attack surface trial.

Free EASM Trial See How Signal Works

Frequently asked questions

What is the Sharp MP-01 media player?

The Sharp MP-01 is a specialized hardware component used in professional environments to manage and play digital signage content. It connects to display screens and relies on dedicated authoring software to push media files, configurations, and operational schedules to the screen for public or internal viewing.

What does CVE-2025-12049 mean?

This vulnerability is classified as Missing Authentication for Critical Function (CWE-306). It means the media player's web-based management interface fails to verify the identity of users attempting to log in. Because of this weakness, anyone who can reach the web interface can interact with the device as if they were an authorized administrator.

How does an attacker trigger this vulnerability?

An attacker triggers this by navigating directly to the web interface of an affected MP-01 device over the network. The vulnerability does not require complex steps or specific user interaction; however, it only exists for the web management portal. Local physical operation of the screen or display functions may remain unaffected by this specific interface flaw.

Is my Sharp MP-01 at risk?

Halo Surface Signal indicates that because these devices are often deployed to support remote content updates, they are frequently accessible via the internet in commercial settings. If your media player is reachable from an external network, it faces a higher likelihood of unauthorized access compared to devices strictly isolated on a private, internal-only network.

What should I do to secure my devices?

Your first step is to perform an inventory of all Sharp MP-01 units in your environment to identify where they are deployed. Once identified, evaluate whether these devices are reachable from the internet or untrusted networks and coordinate with your infrastructure team to restrict access or implement network-level controls while planning for official updates.

References

sharp-displays.jp.sharp/global/support/info/MP01-CVE-2025-12049.html

Written by Nicholas Merritt

Nicholas Merritt is VP of Security Solutions at Halo Security. With more than 25 years across application security, vulnerability prioritization, and offensive security, he helps teams translate threat data into practical exposure validation and remediation focus. He authors Halo Threat Intelligence CVE advisories using Halo Surface Signal and H/A/L/O context to prioritize internet-facing risk.