CVE-2021-20699
Description
Sharp NEC Displays ((UN462A R1.300 and prior to it, UN462VA R1.300 and prior to it, UN492S R1.300 and prior to it, UN492VS R1.300 and prior to it, UN552A R1.300 and prior to it, UN552S R1.300 and prior to it, UN552VS R1.300 and prior to it, UN552 R1.300 and prior to it, UN552V R1.300 and prior to it, UX552S R1.300 and prior to it, UX552 R1.300 and prior to it, V864Q R2.000 and prior to it, C861Q R2.000 and prior to it, P754Q R2.000 and prior to it, V754Q R2.000 and prior to it, C751Q R2.000 and prior to it, V984Q R2.000 and prior to it, C981Q R2.000 and prior to it, P654Q R2.000 and prior to it, V654Q R2.000 and prior to it, C651Q R2.000 and prior to it, V554Q R2.000 and prior to it, P404 R3.200 and prior to it, P484 R3.200 and prior to it, P554 R3.200 and prior to it, V404 R3.200 and prior to it, V484 R3.200 and prior to it, V554 R3.200 and prior to it, V404-T R3.200 and prior to it, V484-T R3.200 and prior to it, V554-T R3.200 and prior to it, C501 R2.000 and prior to it, C551 R2.000 and prior to it, C431 R2.000 and prior to it) allows an attacker a buffer overflow and to execute remote code by sending long parameters that contains specific characters in http request.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sharp-nec-displays un462a_firmware | v ≤ r1.300 | — |
| sharp-nec-displays un462va_firmware | v ≤ r1.300 | — |
| sharp-nec-displays un492s_firmware | v ≤ r1.300 | — |
| sharp-nec-displays un492vs_firmware | v ≤ r1.300 | — |
| sharp-nec-displays un552a_firmware | v ≤ r1.300 | — |
| sharp-nec-displays un552s_firmware | v ≤ r1.300 | — |
| sharp-nec-displays un552vs_firmware | v ≤ r1.300 | — |
| sharp-nec-displays un552_firmware | v ≤ r1.300 | — |
| sharp-nec-displays un552v_firmware | v ≤ r1.300 | — |
| sharp-nec-displays ux552s_firmware | v ≤ r1.300 | — |
| sharp-nec-displays ux552_firmware | v ≤ r1.300 | — |
| sharp-nec-displays v864q_firmware | v ≤ r2.000 | — |
| sharp-nec-displays c861q_firmware | v ≤ r2.000 | — |
| sharp-nec-displays p754q_firmware | v ≤ r2.000 | — |
| sharp-nec-displays v754q_firmware | v ≤ r2.000 | — |
| sharp-nec-displays c751q_firmware | v ≤ r2.000 | — |
| sharp-nec-displays v984q_firmware | v ≤ r2.000 | — |
| sharp-nec-displays c981q_firmware | v ≤ r2.000 | — |
| sharp-nec-displays p654q_firmware | v ≤ r2.000 | — |
| sharp-nec-displays v654q_firmware | v ≤ r2.000 | — |
| sharp-nec-displays c651q_firmware | v ≤ r2.000 | — |
| sharp-nec-displays v554q_firmware | v ≤ r2.000 | — |
| sharp-nec-displays p404_firmware | v ≤ r3.201 | — |
| sharp-nec-displays p484_firmware | v ≤ r3.201 | — |
| sharp-nec-displays p554_firmware | v ≤ r3.201 | — |
| sharp-nec-displays v404_firmware | v ≤ r3.201 | — |
| sharp-nec-displays v484_firmware | v ≤ r3.201 | — |
| sharp-nec-displays v554_firmware | v ≤ r3.201 | — |
| sharp-nec-displays v404-t_firmware | v ≤ r3.201 | — |
| sharp-nec-displays v484-t_firmware | v ≤ r3.201 | — |
| sharp-nec-displays v554-t_firmware | v ≤ r3.201 | — |
| sharp-nec-displays c501_firmware | v ≤ r2.000 | — |
| sharp-nec-displays c551_firmware | v ≤ r2.000 | — |
| sharp-nec-displays c431_firmware | v ≤ r2.000 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.