Skip to content
Fencer Vulns
critical 9.8

CVE-2021-20699 json

Sharp NEC Displays ((UN462A R1.300 and prior to it, UN462VA R1.300 and prior to it, UN492S R1.300 and prior to it, UN492VS R1.300 and prior…

published 2021-06-07 5 y ago modified 2026-06-17 4 mo ago also EUVD-2021-8114

cvss
9.8
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.7%
EPSS 1.7% chance of exploitation in 30 days, percentile 76%
public exploits
0
none known

Summary

Sharp NEC Displays ((UN462A R1.300 and prior to it, UN462VA R1.300 and prior to it, UN492S R1.300 and prior to it, UN492VS R1.300 and prior to it, UN552A R1.300 and prior to it, UN552S R1.300 and prior to it, UN552VS R1.300 and prior to it, UN552 R1.300 and prior to it, UN552V R1.300 and prior to it, UX552S R1.300 and prior to it, UX552 R1.300 and prior to it, V864Q R2.000 and prior to it, C861Q R2.000 and prior to it, P754Q R2.000 and prior to it, V754Q R2.000 and prior to it, C751Q R2.000 and prior to it, V984Q R2.000 and prior to it, C981Q R2.000 and prior to it, P654Q R2.000 and prior to it, V654Q R2.000 and prior to it, C651Q R2.000 and prior to it, V554Q R2.000 and prior to it, P404 R3.200 and prior to it, P484 R3.200 and prior to it, P554 R3.200 and prior to it, V404 R3.200 and prior to it, V484 R3.200 and prior to it, V554 R3.200 and prior to it, V404-T R3.200 and prior to it, V484-T R3.200 and prior to it, V554-T R3.200 and prior to it, C501 R2.000 and prior to it, C551 R2.000 and prior to it, C431 R2.000 and prior to it) allows an attacker a buffer overflow and to execute remote code by sending long parameters that contains specific characters in http request.

Exploit prediction

1.66% chance of exploitation in the next 30 days, higher than 76% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 10.0 AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

  • Sharp Display Solutions, Ltd. UN462A
  • Sharp Display Solutions, Ltd. UN462VA
  • Sharp Display Solutions, Ltd. UN492S
  • Sharp Display Solutions, Ltd. UN492VS
  • Sharp Display Solutions, Ltd. UN552A
  • Sharp Display Solutions, Ltd. UN552S
  • Sharp Display Solutions, Ltd. UN552VS
  • Sharp Display Solutions, Ltd. UN552
  • Sharp Display Solutions, Ltd. UN552V
  • Sharp Display Solutions, Ltd. UX552S
  • Sharp Display Solutions, Ltd. UX552
  • Sharp Display Solutions, Ltd. V864Q
  • Sharp Display Solutions, Ltd. C861Q
  • Sharp Display Solutions, Ltd. P754Q
  • Sharp Display Solutions, Ltd. V754Q
  • Sharp Display Solutions, Ltd. C751Q
  • Sharp Display Solutions, Ltd. V984Q
  • Sharp Display Solutions, Ltd. C981Q
  • Sharp Display Solutions, Ltd. P654Q
  • Sharp Display Solutions, Ltd. V654Q
  • Sharp Display Solutions, Ltd. C651Q
  • Sharp Display Solutions, Ltd. V554Q
  • Sharp Display Solutions, Ltd. C501
  • Sharp Display Solutions, Ltd. C551
  • Sharp Display Solutions, Ltd. C431
  • Sharp Display Solutions, Ltd. P404
  • Sharp Display Solutions, Ltd. P484
  • Sharp Display Solutions, Ltd. P554
  • Sharp Display Solutions, Ltd. V404
  • Sharp Display Solutions, Ltd. V484
  • Sharp Display Solutions, Ltd. V554
  • Sharp Display Solutions, Ltd. V404-T
  • Sharp Display Solutions, Ltd. V484-T
  • Sharp Display Solutions, Ltd. V554-T

Classification

Weakness
  • CWE-77 Improper Neutralization of Special Elements used in a Command
  • CWE-120 Buffer Copy without Checking Size of Input

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.