CVE-2021-20699

Sharp NEC Displays ((UN462A R1.300 and prior to it, UN462VA R1.300 and prior to it, UN492S R1.300 and prior to it, UN492VS R1.300 and prior to it, UN552A R1.300 and prior to it, UN552S R1.300 and prior to it, UN552VS R1.300 and prior to it, UN552 R1.300 and prior to it, UN552V R1.300 and prior to it, UX552S R1.300 and prior to it, UX552 R1.300 and prior to it, V864Q R2.000 and prior to it, C861Q R2.000 and prior to it, P754Q R2.000 and prior to it, V754Q R2.000 and prior to it, C751Q R2.000 and prior to it, V984Q R2.000 and prior to it, C981Q R2.000 and prior to it, P654Q R2.000 and prior to it, V654Q R2.000 and prior to it, C651Q R2.000 and prior to it, V554Q R2.000 and prior to it, P404 R3.200 and prior to it, P484 R3.200 and prior to it, P554 R3.200 and prior to it, V404 R3.200 and prior to it, V484 R3.200 and prior to it, V554 R3.200 and prior to it, V404-T R3.200 and prior to it, V484-T R3.200 and prior to it, V554-T R3.200 and prior to it, C501 R2.000 and prior to it, C551 R2.000 and prior to it, C431 R2.000 and prior to it) allows an attacker a buffer overflow and to execute remote code by sending long parameters that contains specific characters in http request.

CVSS v3 9.8 CRITICAL
CVSS v2.0 10.0 HIGH

9.8^/10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

10.0^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
https://www.sharp-nec-displays.com/global/support/info/A5-1_vulnerability.html

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:sharp-nec-displays:un462a_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:un462a:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:sharp-nec-displays:un462va_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:un462va:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:sharp-nec-displays:un492s_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:un492s:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:o:sharp-nec-displays:un492vs_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:un492vs:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND

cpe:2.3:o:sharp-nec-displays:un552a_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:un552a:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND

cpe:2.3:o:sharp-nec-displays:un552s_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:un552s:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND

cpe:2.3:o:sharp-nec-displays:un552vs_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:un552vs:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND

cpe:2.3:o:sharp-nec-displays:un552_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:un552:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND

cpe:2.3:o:sharp-nec-displays:un552v_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:un552v:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND

cpe:2.3:o:sharp-nec-displays:ux552s_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:ux552s:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND

cpe:2.3:o:sharp-nec-displays:ux552_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:ux552:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND

cpe:2.3:o:sharp-nec-displays:v864q_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:v864q:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND

cpe:2.3:o:sharp-nec-displays:c861q_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:c861q:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND

cpe:2.3:o:sharp-nec-displays:p754q_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:p754q:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND

cpe:2.3:o:sharp-nec-displays:v754q_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:v754q:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND

cpe:2.3:o:sharp-nec-displays:c751q_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:c751q:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND

cpe:2.3:o:sharp-nec-displays:v984q_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:v984q:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND

cpe:2.3:o:sharp-nec-displays:c981q_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:c981q:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND

cpe:2.3:o:sharp-nec-displays:p654q_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:p654q:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND

cpe:2.3:o:sharp-nec-displays:v654q_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:v654q:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND

cpe:2.3:o:sharp-nec-displays:c651q_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:c651q:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND

cpe:2.3:o:sharp-nec-displays:v554q_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:v554q:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND

cpe:2.3:o:sharp-nec-displays:p404_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:p404:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND

cpe:2.3:o:sharp-nec-displays:p484_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:p484:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND

cpe:2.3:o:sharp-nec-displays:p554_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:p554:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND

cpe:2.3:o:sharp-nec-displays:v404_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:v404:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND

cpe:2.3:o:sharp-nec-displays:v484_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:v484:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND

cpe:2.3:o:sharp-nec-displays:v554_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:v554:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND

cpe:2.3:o:sharp-nec-displays:v404-t_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:v404-t:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND

cpe:2.3:o:sharp-nec-displays:v484-t_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:v484-t:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND

cpe:2.3:o:sharp-nec-displays:v554-t_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:v554-t:-:*:*:*:*:*:*:*

Configuration 32 (hide)

AND

cpe:2.3:o:sharp-nec-displays:c501_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:c501:-:*:*:*:*:*:*:*

Configuration 33 (hide)

AND

cpe:2.3:o:sharp-nec-displays:c551_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:c551:-:*:*:*:*:*:*:*

Configuration 34 (hide)

AND

cpe:2.3:o:sharp-nec-displays:c431_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sharp-nec-displays:c431:-:*:*:*:*:*:*:*

History

07 Nov 2023, 03:29

Type	Values Removed	Values Added
References	~~(MISC) https://www.sharp-nec-displays.com/global/support/info/A5-1_vulnerability.html - Vendor Advisory~~	() https://www.sharp-nec-displays.com/global/support/info/A5-1_vulnerability.html -

06 Oct 2022, 18:26

Type	Values Removed	Values Added
First Time		Sharp-nec-displays un492vs Sharp-nec-displays ux552 Sharp-nec-displays c501 Sharp-nec-displays c651q Sharp-nec-displays c981q Firmware Sharp-nec-displays v654q Sharp-nec-displays p554 Sharp-nec-displays p654q Sharp-nec-displays ux552s Firmware Sharp-nec-displays un552v Sharp-nec-displays v554q Firmware Sharp-nec-displays p754q Firmware Sharp-nec-displays c501 Firmware Sharp-nec-displays c551 Firmware Sharp-nec-displays p404 Sharp-nec-displays Sharp-nec-displays c981q Sharp-nec-displays ux552s Sharp-nec-displays v984q Sharp-nec-displays un552a Firmware Sharp-nec-displays c751q Sharp-nec-displays c751q Firmware Sharp-nec-displays un552v Firmware Sharp-nec-displays un552s Firmware Sharp-nec-displays un462va Sharp-nec-displays un552vs Sharp-nec-displays v404 Firmware Sharp-nec-displays c651q Firmware Sharp-nec-displays c431 Sharp-nec-displays v864q Firmware Sharp-nec-displays un552vs Firmware Sharp-nec-displays v554q Sharp-nec-displays un462a Sharp-nec-displays v404-t Firmware Sharp-nec-displays v864q Sharp-nec-displays v554-t Sharp-nec-displays p484 Firmware Sharp-nec-displays un552a Sharp-nec-displays p404 Firmware Sharp-nec-displays v984q Firmware Sharp-nec-displays un552s Sharp-nec-displays v554-t Firmware Sharp-nec-displays un492s Sharp-nec-displays v654q Firmware Sharp-nec-displays un552 Sharp-nec-displays un552 Firmware Sharp-nec-displays p554 Firmware Sharp-nec-displays un462a Firmware Sharp-nec-displays c551 Sharp-nec-displays v404-t Sharp-nec-displays p484 Sharp-nec-displays c431 Firmware Sharp-nec-displays c861q Firmware Sharp-nec-displays ux552 Firmware Sharp-nec-displays p654q Firmware Sharp-nec-displays v484-t Firmware Sharp-nec-displays c861q Sharp-nec-displays v554 Firmware Sharp-nec-displays un462va Firmware Sharp-nec-displays v754q Firmware Sharp-nec-displays v484 Sharp-nec-displays v484-t Sharp-nec-displays v404 Sharp-nec-displays v754q Sharp-nec-displays un492s Firmware Sharp-nec-displays un492vs Firmware Sharp-nec-displays v554 Sharp-nec-displays v484 Firmware Sharp-nec-displays p754q
CPE	cpe:2.3:h:sharp-nec-display:p654q:-:::::::* cpe:2.3:o:sharp-nec-display:v864q_firmware:::::::: cpe:2.3:o:sharp-nec-display:v654q_firmware:::::::: cpe:2.3:o:sharp-nec-display:un492vs_firmware:::::::: cpe:2.3:o:sharp-nec-display:v754q_firmware:::::::: cpe:2.3:o:sharp-nec-display:un552_firmware:::::::: cpe:2.3:o:sharp-nec-display:p654q_firmware:::::::: cpe:2.3:o:sharp-nec-display:ux552s_firmware:::::::: cpe:2.3:h:sharp-nec-display:c651q:-:::::::* cpe:2.3:o:sharp-nec-display:c861q_firmware:::::::: cpe:2.3:h:sharp-nec-display:ux552s:-:::::::* cpe:2.3:h:sharp-nec-display:un552:-:::::::* cpe:2.3:o:sharp-nec-display:c981q_firmware:::::::: cpe:2.3:h:sharp-nec-display:un552vs:-:::::::* cpe:2.3:h:sharp-nec-display:c751q:-:::::::* cpe:2.3:h:sharp-nec-display:p754q:-:::::::* cpe:2.3:h:sharp-nec-display:v754q:-:::::::* cpe:2.3:h:sharp-nec-display:un492s:-:::::::* cpe:2.3:o:sharp-nec-display:p754q_firmware:::::::: cpe:2.3:h:sharp-nec-display:un492vs:-:::::::* cpe:2.3:o:sharp-nec-display:un552a_firmware:::::::: cpe:2.3:o:sharp-nec-display:v554q_firmware:::::::: cpe:2.3:h:sharp-nec-display:un462va:-:::::::* cpe:2.3:o:sharp-nec-display:un552v_firmware:::::::: cpe:2.3:o:sharp-nec-display:un492s_firmware:::::::: cpe:2.3:o:sharp-nec-display:un552s_firmware:::::::: cpe:2.3:h:sharp-nec-display:c981q:-:::::::* cpe:2.3:h:sharp-nec-display:v864q:-:::::::* cpe:2.3:o:sharp-nec-display:un462a_firmware:::::::: cpe:2.3:h:sharp-nec-display:un462a:-:::::::* cpe:2.3:h:sharp-nec-display:un552a:-:::::::* cpe:2.3:o:sharp-nec-display:un552vs_firmware:::::::: cpe:2.3:h:sharp-nec-display:un552v:-:::::::* cpe:2.3:h:sharp-nec-display:v654q:-:::::::* cpe:2.3:o:sharp-nec-display:un462va_firmware:::::::: cpe:2.3:h:sharp-nec-display:c861q:-:::::::* cpe:2.3:h:sharp-nec-display:un552s:-:::::::* cpe:2.3:o:sharp-nec-display:c651q_firmware:::::::: cpe:2.3:h:sharp-nec-display:v554q:-:::::::* cpe:2.3:o:sharp-nec-display:v964q_firmware:::::::: cpe:2.3:o:sharp-nec-display:c751q_firmware:::::::: cpe:2.3:h:sharp-nec-display:v964q:-:::::::*	cpe:2.3:o:sharp-nec-displays:v554-t_firmware:::::::: cpe:2.3:h:sharp-nec-displays:c861q:-:::::::* cpe:2.3:o:sharp-nec-displays:un552vs_firmware:::::::: cpe:2.3:o:sharp-nec-displays:v754q_firmware:::::::: cpe:2.3:h:sharp-nec-displays:v754q:-:::::::* cpe:2.3:h:sharp-nec-displays:c981q:-:::::::* cpe:2.3:h:sharp-nec-displays:v554:-:::::::* cpe:2.3:h:sharp-nec-displays:un552vs:-:::::::* cpe:2.3:o:sharp-nec-displays:c861q_firmware:::::::: cpe:2.3:h:sharp-nec-displays:c501:-:::::::* cpe:2.3:h:sharp-nec-displays:c651q:-:::::::* cpe:2.3:h:sharp-nec-displays:v654q:-:::::::* cpe:2.3:h:sharp-nec-displays:v554-t:-:::::::* cpe:2.3:h:sharp-nec-displays:un552s:-:::::::* cpe:2.3:o:sharp-nec-displays:v984q_firmware:::::::: cpe:2.3:o:sharp-nec-displays:un462va_firmware:::::::: cpe:2.3:o:sharp-nec-displays:v654q_firmware:::::::: cpe:2.3:h:sharp-nec-displays:p754q:-:::::::* cpe:2.3:h:sharp-nec-displays:un492vs:-:::::::* cpe:2.3:o:sharp-nec-displays:p554_firmware:::::::: cpe:2.3:o:sharp-nec-displays:v484-t_firmware:::::::: cpe:2.3:h:sharp-nec-displays:v484-t:-:::::::* cpe:2.3:o:sharp-nec-displays:c981q_firmware:::::::: cpe:2.3:o:sharp-nec-displays:v404-t_firmware:::::::: cpe:2.3:h:sharp-nec-displays:p484:-:::::::* cpe:2.3:h:sharp-nec-displays:v404-t:-:::::::* cpe:2.3:o:sharp-nec-displays:ux552s_firmware:::::::: cpe:2.3:o:sharp-nec-displays:c651q_firmware:::::::: cpe:2.3:h:sharp-nec-displays:c431:-:::::::* cpe:2.3:h:sharp-nec-displays:un552a:-:::::::* cpe:2.3:h:sharp-nec-displays:un552:-:::::::* cpe:2.3:h:sharp-nec-displays:un552v:-:::::::* cpe:2.3:h:sharp-nec-displays:un462a:-:::::::* cpe:2.3:h:sharp-nec-displays:p654q:-:::::::* cpe:2.3:o:sharp-nec-displays:v484_firmware:::::::: cpe:2.3:h:sharp-nec-displays:c751q:-:::::::* cpe:2.3:o:sharp-nec-displays:c551_firmware:::::::: cpe:2.3:o:sharp-nec-displays:v864q_firmware:::::::: cpe:2.3:h:sharp-nec-displays:v984q:-:::::::* cpe:2.3:o:sharp-nec-displays:un552v_firmware:::::::: cpe:2.3:h:sharp-nec-displays:un462va:-:::::::* cpe:2.3:h:sharp-nec-displays:ux552s:-:::::::* cpe:2.3:h:sharp-nec-displays:v554q:-:::::::* cpe:2.3:o:sharp-nec-displays:v554q_firmware:::::::: cpe:2.3:h:sharp-nec-displays:v404:-:::::::* cpe:2.3:o:sharp-nec-displays:un552s_firmware:::::::: cpe:2.3:o:sharp-nec-displays:c431_firmware:::::::: cpe:2.3:o:sharp-nec-displays:un552_firmware:::::::: cpe:2.3:h:sharp-nec-displays:p404:-:::::::* cpe:2.3:o:sharp-nec-displays:p484_firmware:::::::: cpe:2.3:o:sharp-nec-displays:v554_firmware:::::::: cpe:2.3:o:sharp-nec-displays:c501_firmware:::::::: cpe:2.3:o:sharp-nec-displays:un492s_firmware:::::::: cpe:2.3:o:sharp-nec-displays:p754q_firmware:::::::: cpe:2.3:o:sharp-nec-displays:ux552_firmware:::::::: cpe:2.3:o:sharp-nec-displays:un552a_firmware:::::::: cpe:2.3:h:sharp-nec-displays:v484:-:::::::* cpe:2.3:h:sharp-nec-displays:un492s:-:::::::* cpe:2.3:h:sharp-nec-displays:v864q:-:::::::* cpe:2.3:o:sharp-nec-displays:v404_firmware:::::::: cpe:2.3:o:sharp-nec-displays:c751q_firmware:::::::: cpe:2.3:h:sharp-nec-displays:c551:-:::::::* cpe:2.3:h:sharp-nec-displays:ux552:-:::::::* cpe:2.3:o:sharp-nec-displays:un492vs_firmware:::::::: cpe:2.3:o:sharp-nec-displays:un462a_firmware:::::::: cpe:2.3:o:sharp-nec-displays:p654q_firmware:::::::: cpe:2.3:o:sharp-nec-displays:p404_firmware:::::::: cpe:2.3:h:sharp-nec-displays:p554:-:::::::*

12 Oct 2021, 18:15

Type	Values Removed	Values Added
Summary	Sharp NEC Displays (UN462A R1.300 and prior to it, UN462VA R1.300 and prior to it, UN492S R1.300 and prior to it, UN492VS R1.300 and prior to it, UN552A R1.300 and prior to it, UN552S R1.300 and prior to it, UN552VS R1.300 and prior to it, UN552 R1.300 and prior to it, UN552V R1.300 and prior to it, UX552S R1.300 and prior to it, UN552 R1.300 and prior to it, V864Q R2.000 and prior to it, C861Q R2.000 and prior to it, P754Q R2.000 and prior to it, V754Q R2.000 and prior to it, C751Q R2.000 and prior to it, V964Q R2.000 and prior to it, C961Q R2.000 and prior to it, P654Q R2.000 and prior to it, V654Q R2.000 and prior to it, C651Q R2.000 and prior to it, V554Q R2.000 and prior to it, P404 R3.300 and prior to it, P484 R3.300 and prior to it, P554 R3.300 and prior to it, V404 R3.300 and prior to it, V484 R3.300 and prior to it, V554 R3.300 and prior to it, V404-T R3.300 and prior to it, V484-T R3.300 and prior to it, V554-T R3.300 and prior to it, C501 R2.100 and prior to it, C551 R2.100 and prior to it, C431 R2.100 and prior to it) allows an attacker a buffer overflow and to execute remote code by sending long parameters that contains specific characters in http request.	Sharp NEC Displays ((UN462A R1.300 and prior to it, UN462VA R1.300 and prior to it, UN492S R1.300 and prior to it, UN492VS R1.300 and prior to it, UN552A R1.300 and prior to it, UN552S R1.300 and prior to it, UN552VS R1.300 and prior to it, UN552 R1.300 and prior to it, UN552V R1.300 and prior to it, UX552S R1.300 and prior to it, UX552 R1.300 and prior to it, V864Q R2.000 and prior to it, C861Q R2.000 and prior to it, P754Q R2.000 and prior to it, V754Q R2.000 and prior to it, C751Q R2.000 and prior to it, V984Q R2.000 and prior to it, C981Q R2.000 and prior to it, P654Q R2.000 and prior to it, V654Q R2.000 and prior to it, C651Q R2.000 and prior to it, V554Q R2.000 and prior to it, P404 R3.200 and prior to it, P484 R3.200 and prior to it, P554 R3.200 and prior to it, V404 R3.200 and prior to it, V484 R3.200 and prior to it, V554 R3.200 and prior to it, V404-T R3.200 and prior to it, V484-T R3.200 and prior to it, V554-T R3.200 and prior to it, C501 R2.000 and prior to it, C551 R2.000 and prior to it, C431 R2.000 and prior to it) allows an attacker a buffer overflow and to execute remote code by sending long parameters that contains specific characters in http request.
References	~~{'url': 'http://jvn.jp/en/jp/JVN42866574/index.html', 'name': 'JVN#42866574', 'tags': [], 'refsource': 'JVN'}~~

17 Sep 2021, 05:15

Type	Values Removed	Values Added
References		(JVN) http://jvn.jp/en/jp/JVN42866574/index.html -

19 Jul 2021, 18:15

Type	Values Removed	Values Added
Summary	Sharp NEC Displays (UN462A R1.300 and prior to it, UN462VA R1.300 and prior to it, UN492S R1.300 and prior to it, UN492VS R1.300 and prior to it, UN552A R1.300 and prior to it, UN552S R1.300 and prior to it, UN552VS R1.300 and prior to it, UN552 R1.300 and prior to it, UN552V R1.300 and prior to it, UX552S R1.300 and prior to it, UN552 R1.300 and prior to it, V864Q R2.000 and prior to it, C861Q R2.000 and prior to it, P754Q R2.000 and prior to it, V754Q R2.000 and prior to it, C751Q R2.000 and prior to it, V964Q R2.000 and prior to it, C961Q R2.000 and prior to it, P654Q R2.000 and prior to it, V654Q R2.000 and prior to it, C651Q R2.000 and prior to it, V554Q R2.000 and prior to it) allows an attacker a buffer overflow and to execute remote code by sending long parameters that contains specific characters in http request.	Sharp NEC Displays (UN462A R1.300 and prior to it, UN462VA R1.300 and prior to it, UN492S R1.300 and prior to it, UN492VS R1.300 and prior to it, UN552A R1.300 and prior to it, UN552S R1.300 and prior to it, UN552VS R1.300 and prior to it, UN552 R1.300 and prior to it, UN552V R1.300 and prior to it, UX552S R1.300 and prior to it, UN552 R1.300 and prior to it, V864Q R2.000 and prior to it, C861Q R2.000 and prior to it, P754Q R2.000 and prior to it, V754Q R2.000 and prior to it, C751Q R2.000 and prior to it, V964Q R2.000 and prior to it, C961Q R2.000 and prior to it, P654Q R2.000 and prior to it, V654Q R2.000 and prior to it, C651Q R2.000 and prior to it, V554Q R2.000 and prior to it, P404 R3.300 and prior to it, P484 R3.300 and prior to it, P554 R3.300 and prior to it, V404 R3.300 and prior to it, V484 R3.300 and prior to it, V554 R3.300 and prior to it, V404-T R3.300 and prior to it, V484-T R3.300 and prior to it, V554-T R3.300 and prior to it, C501 R2.100 and prior to it, C551 R2.100 and prior to it, C431 R2.100 and prior to it) allows an attacker a buffer overflow and to execute remote code by sending long parameters that contains specific characters in http request.

16 Jun 2021, 17:23

Type	Values Removed	Values Added
References	~~(MISC) https://www.sharp-nec-displays.com/global/support/info/A5-1_vulnerability.html -~~	(MISC) https://www.sharp-nec-displays.com/global/support/info/A5-1_vulnerability.html - Vendor Advisory
CWE		CWE-120 CWE-77
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : 10.0 v3 : 9.8
CPE		cpe:2.3:h:sharp-nec-display:p754q:-:::::::* cpe:2.3:o:sharp-nec-display:un462a_firmware:::::::: cpe:2.3:h:sharp-nec-display:un552:-:::::::* cpe:2.3:h:sharp-nec-display:un462a:-:::::::* cpe:2.3:o:sharp-nec-display:c751q_firmware:::::::: cpe:2.3:h:sharp-nec-display:c751q:-:::::::* cpe:2.3:o:sharp-nec-display:un492s_firmware:::::::: cpe:2.3:o:sharp-nec-display:p754q_firmware:::::::: cpe:2.3:h:sharp-nec-display:v554q:-:::::::* cpe:2.3:h:sharp-nec-display:un492s:-:::::::* cpe:2.3:o:sharp-nec-display:un552vs_firmware:::::::: cpe:2.3:h:sharp-nec-display:un492vs:-:::::::* cpe:2.3:h:sharp-nec-display:un552s:-:::::::* cpe:2.3:h:sharp-nec-display:un552a:-:::::::* cpe:2.3:o:sharp-nec-display:ux552s_firmware:::::::: cpe:2.3:h:sharp-nec-display:v754q:-:::::::* cpe:2.3:o:sharp-nec-display:v754q_firmware:::::::: cpe:2.3:o:sharp-nec-display:v864q_firmware:::::::: cpe:2.3:o:sharp-nec-display:p654q_firmware:::::::: cpe:2.3:o:sharp-nec-display:un552v_firmware:::::::: cpe:2.3:h:sharp-nec-display:c861q:-:::::::* cpe:2.3:h:sharp-nec-display:v654q:-:::::::* cpe:2.3:o:sharp-nec-display:c981q_firmware:::::::: cpe:2.3:h:sharp-nec-display:un462va:-:::::::* cpe:2.3:h:sharp-nec-display:un552v:-:::::::* cpe:2.3:o:sharp-nec-display:un552s_firmware:::::::: cpe:2.3:h:sharp-nec-display:ux552s:-:::::::* cpe:2.3:o:sharp-nec-display:c651q_firmware:::::::: cpe:2.3:h:sharp-nec-display:c651q:-:::::::* cpe:2.3:o:sharp-nec-display:un462va_firmware:::::::: cpe:2.3:h:sharp-nec-display:un552vs:-:::::::* cpe:2.3:o:sharp-nec-display:un492vs_firmware:::::::: cpe:2.3:o:sharp-nec-display:v654q_firmware:::::::: cpe:2.3:o:sharp-nec-display:un552a_firmware:::::::: cpe:2.3:h:sharp-nec-display:p654q:-:::::::* cpe:2.3:o:sharp-nec-display:v964q_firmware:::::::: cpe:2.3:h:sharp-nec-display:v964q:-:::::::* cpe:2.3:h:sharp-nec-display:c981q:-:::::::* cpe:2.3:o:sharp-nec-display:un552_firmware:::::::: cpe:2.3:o:sharp-nec-display:c861q_firmware:::::::: cpe:2.3:o:sharp-nec-display:v554q_firmware:::::::: cpe:2.3:h:sharp-nec-display:v864q:-:::::::*

07 Jun 2021, 14:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2021-06-07 14:15

Updated : 2023-12-10 13:55

NVD link : CVE-2021-20699

Mitre link : CVE-2021-20699

CVE.ORG link : CVE-2021-20699

JSON object : View

Products Affected

sharp-nec-displays

v554-t
un552_firmware
un552a
c501
un492s
un552a_firmware
v654q
v864q_firmware
v754q
v404
v404-t_firmware
un462a_firmware
un552s
ux552
v654q_firmware
p484
un552v
un492vs
v484-t_firmware
un552
c551
un552vs
c751q
p404_firmware
c751q_firmware
un552v_firmware
v554q_firmware
un462va_firmware
v404-t
c861q
c651q
v754q_firmware
c861q_firmware
un462a
un552s_firmware
p754q_firmware
p754q
un492vs_firmware
p484_firmware
v864q
c651q_firmware
v484-t
p404
ux552s_firmware
v484
un552vs_firmware
ux552s
v984q
p554_firmware
p654q
c431
ux552_firmware
p554
c501_firmware
un492s_firmware
v484_firmware
v554
v404_firmware
v984q_firmware
v554_firmware
p654q_firmware
c981q
v554q
c551_firmware
c431_firmware
un462va
v554-t_firmware
c981q_firmware

CWE

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

9.8 /10