Vulnerabilities allowing unauthorized information retrieval in projectors
CVE Identifier: CVE-2025-11544
Description
The following projectors have vulnerabilities that allow an attacker to execute hidden commands and improperly obtain network connection information.
Models
Workaround
Apply following workaround to avoid the effects of this vulnerability.
- Use the product only in a safe intranet protected by a firewall and do not connect the product to the Internet.
The above workaround prevents illegal access to the product.
The following products can avoid the impact of this vulnerability by updating the projector firmware (contact us).
- NP-P627UL
- NP-P627ULG
- NP-P627UL+
- NP-P547UL
- NP-P547ULG
- NP-P547UL+
- NP-P607UL+
- NP-CG6600UL
- NP-H6271UL
- NP-H5471UL
- NP-P627ULH
- NP-P547ULH
Reference
Acknowledgements
Thank you to Mr. Sebastian Pahl from the University of Luxembourg for reporting this vulnerability.