Search
Find a vulnerability
Search criteria
4 vulnerabilities by Sharp NEC Display Solutions, Ltd.
JVNDB-2025-022878
Vulnerability from jvndb - Published: 2025-12-24 11:10 - Updated:2026-01-15 11:10
Severity
Summary
Media Player MP-01 vulnerable to Missing Authentication for Critical Function
Details
NEC branded Media Player MP-01 manufactured by Sharp Display Solutions, Ltd. contains the following vulnerability.
- Missing Authentication for Critical Function (CWE-306) - CVE-2025-12049
References
| Type | URL | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | |
|---|---|---|
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-022878.html",
"dc:date": "2026-01-15T11:10+09:00",
"dcterms:issued": "2025-12-24T11:10+09:00",
"dcterms:modified": "2026-01-15T11:10+09:00",
"description": "NEC branded Media Player MP-01 manufactured by Sharp Display Solutions, Ltd. contains the following vulnerability.\u003cul\u003e\u003cli\u003eMissing Authentication for Critical Function (CWE-306) - CVE-2025-12049\u003c/li\u003e\u003c/ul\u003eSouvik Kandar of MicroSec (microsec.io) discovered and reported the vulnerability to the developer and CISA. Cooperating with CISA, JPCERT/CC coordinated between the reporter and the developer.",
"link": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-022878.html",
"sec:cpe": {
"#text": "cpe:/a:misc:sharp-display-solutions_mp-01",
"@product": "Media Player MP-01",
"@vendor": "Sharp Display Solutions, Ltd.",
"@version": "2.2"
},
"sec:cvss": {
"@score": "9.8",
"@severity": "Critical",
"@type": "Base",
"@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"@version": "3.0"
},
"sec:identifier": "JVNDB-2025-022878",
"sec:references": [
{
"#text": "https://jvn.jp/en/vu/JVNVU96231218/index.html",
"@id": "JVNVU#96231218",
"@source": "JVN"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2025-12049",
"@id": "CVE-2025-12049",
"@source": "CVE"
},
{
"#text": "https://cwe.mitre.org/data/definitions/306.html",
"@id": "CWE-306",
"@title": "Missing Authentication for Critical Function(CWE-306)"
}
],
"title": "Media Player MP-01 vulnerable to Missing Authentication for Critical Function"
}
JVNDB-2024-009396
Vulnerability from jvndb - Published: 2024-09-30 12:46 - Updated:2024-09-30 12:46
Severity
Summary
SNMP service is enabled by default in Sharp NEC Display Solutions projectors
Details
Multiple projectors provided by Sharp NEC Display Solutions, Ltd. are configured with SNMP service enabled by default, therefore can be accessed by specifying SNMP community name "public" (CWE-1242 ,CVE-2024-7011).
SNMP service configuration (enable/disable) cannot be changed on the management page of the projectors either.
This vulnerability was directly reported to Sharp NEC Display Solutions, Ltd. by the reporter. Sharp NEC Display Solutions, Ltd. reported the case to JPCERT/CC to notify users of the solution through JVN.
Reporter: JP Hofmeyr of Southern Metropolitan Cemeteries Trust
References
| Type | URL | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | |
|---|---|---|
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-009396.html",
"dc:date": "2024-09-30T12:46+09:00",
"dcterms:issued": "2024-09-30T12:46+09:00",
"dcterms:modified": "2024-09-30T12:46+09:00",
"description": "Multiple projectors provided by Sharp NEC Display Solutions, Ltd. are configured with SNMP service enabled by default, therefore can be accessed by specifying SNMP community name \"public\" (CWE-1242 ,CVE-2024-7011).\r\nSNMP service configuration (enable/disable) cannot be changed on the management page of the projectors either.\r\n\r\nThis vulnerability was directly reported to Sharp NEC Display Solutions, Ltd. by the reporter. Sharp NEC Display Solutions, Ltd. reported the case to JPCERT/CC to notify users of the solution through JVN.\r\nReporter: JP Hofmeyr of Southern Metropolitan Cemeteries Trust",
"link": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-009396.html",
"sec:cpe": {
"#text": "cpe:/a:sharp-nec-displays:multiple_product",
"@product": "(Multiple Product)",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
"sec:cvss": {
"@score": "5.3",
"@severity": "Medium",
"@type": "Base",
"@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"@version": "3.0"
},
"sec:identifier": "JVNDB-2024-009396",
"sec:references": [
{
"#text": "https://jvn.jp/en/vu/JVNVU91077448/index.html",
"@id": "JVNVU#91077448",
"@source": "JVN"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2024-7011",
"@id": "CVE-2024-7011",
"@source": "CVE"
},
{
"#text": "https://cwe.mitre.org/data/definitions/1242.html",
"@id": "CWE-1242",
"@title": "Inclusion of Undocumented Features or Chicken Bits(CWE-1242)"
}
],
"title": "SNMP service is enabled by default in Sharp NEC Display Solutions projectors"
}
JVNDB-2024-001882
Vulnerability from jvndb - Published: 2024-02-07 14:25 - Updated:2024-07-11 14:27
Severity
Summary
Sharp NEC Display Solutions' public displays vulnerable to local file inclusion
Details
Multiple public displays provided by Sharp NEC Display Solutions, Ltd. contain a local file inclusion vulnerability (CWE-22, CVE-2023-7077).
Tunahan TEKEOĞLU of Senior Cyber Security Consultant reported this vulnerability to Sharp NEC Display Solutions, Ltd. and coordinated. Sharp NEC Display Solutions, Ltd. reported this case to JPCERT/CC to notify users of the solution through JVN.
References
Impacted products
| Vendor | Product | |
|---|---|---|
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-001882.html",
"dc:date": "2024-07-11T14:27+09:00",
"dcterms:issued": "2024-02-07T14:25+09:00",
"dcterms:modified": "2024-07-11T14:27+09:00",
"description": "Multiple public displays provided by Sharp NEC Display Solutions, Ltd. contain a local file inclusion vulnerability (CWE-22, CVE-2023-7077).\r\n\r\nTunahan TEKEO\u0026#286;LU of Senior Cyber Security Consultant reported this vulnerability to Sharp NEC Display Solutions, Ltd. and coordinated. Sharp NEC Display Solutions, Ltd. reported this case to JPCERT/CC to notify users of the solution through JVN.",
"link": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-001882.html",
"sec:cpe": {
"#text": "cpe:/a:sharp-nec-displays:multiple_product",
"@product": "(Multiple Product)",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
"sec:cvss": {
"@score": "9.8",
"@severity": "Critical",
"@type": "Base",
"@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"@version": "3.0"
},
"sec:identifier": "JVNDB-2024-001882",
"sec:references": [
{
"#text": "https://jvn.jp/en/vu/JVNVU97836276/index.html",
"@id": "JVNVU#97836276",
"@source": "JVN"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2023-7077",
"@id": "CVE-2023-7077",
"@source": "CVE"
},
{
"#text": "https://nvd.nist.gov/vuln/detail/CVE-2023-7077",
"@id": "CVE-2023-7077",
"@source": "NVD"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-22",
"@title": "Path Traversal(CWE-22)"
}
],
"title": "Sharp NEC Display Solutions\u0027 public displays vulnerable to local file inclusion"
}
JVNDB-2021-000081
Vulnerability from jvndb - Published: 2021-09-17 15:13 - Updated:2025-12-10 10:24
Severity
Summary
Multiple vulnerabilities in Sharp NEC Display Solutions' public displays
Details
Multiple public displays provided by Sharp NEC Display Solutions, Ltd. contain multiple vulnerabilities listed below.
* Command Injection (CWE-77) - CVE-2021-20698
* Buffer Overflow (CWE-120) - CVE-2021-20699
Howard McGreehan of Aon's Cyber Solutions reported these vulnerabilities to Sharp NEC Display Solutions, Ltd., and Sharp NEC Display Solutions, Ltd. reported them to JPCERT/CC to notify users of the solution through JVN.
References
Impacted products
| Vendor | Product | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2021/JVNDB-2021-000081.html",
"dc:date": "2025-12-10T10:24+09:00",
"dcterms:issued": "2021-09-17T15:13+09:00",
"dcterms:modified": "2025-12-10T10:24+09:00",
"description": "Multiple public displays provided by Sharp NEC Display Solutions, Ltd. contain multiple vulnerabilities listed below.\r\n* Command Injection (CWE-77) - CVE-2021-20698\r\n* Buffer Overflow (CWE-120) - CVE-2021-20699\r\n\r\nHoward McGreehan of Aon\u0027s Cyber Solutions reported these vulnerabilities to Sharp NEC Display Solutions, Ltd., and Sharp NEC Display Solutions, Ltd. reported them to JPCERT/CC to notify users of the solution through JVN.",
"link": "https://jvndb.jvn.jp/en/contents/2021/JVNDB-2021-000081.html",
"sec:cpe": [
{
"#text": "cpe:/o:sharp-nec-displays:c431_firmware",
"@product": "C431",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:c501_firmware",
"@product": "C501",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:c551_firmware",
"@product": "C551",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:c651q_firmware",
"@product": "C651Q",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:c751q_firmware",
"@product": "C751Q",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:c861q_firmware",
"@product": "C861Q",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:c981q_firmware",
"@product": "C981Q",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:p404_firmware",
"@product": "P404",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:p484_firmware",
"@product": "P484",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:p554_firmware",
"@product": "P554",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:p654q_firmware",
"@product": "P654Q",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:p754q_firmware",
"@product": "P754Q",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:un462a_firmware",
"@product": "UN462A",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:un462va_firmware",
"@product": "UN462VA",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:un492s_firmware",
"@product": "UN492S",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:un492vs_firmware",
"@product": "UN492VS",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:un552a_firmware",
"@product": "UN552A",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:un552s_firmware",
"@product": "UN552S",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:un552vs_firmware",
"@product": "UN552VS",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:un552v_firmware",
"@product": "UN552V",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:un552_firmware",
"@product": "UN552",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:ux552_firmware",
"@product": "UX552",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:v404-t_firmware",
"@product": "V404-T",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:v404_firmware",
"@product": "V404",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:v484-t_firmware",
"@product": "V484-T",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:v484_firmware",
"@product": "V484",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:v554-t_firmware",
"@product": "V554-T",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:v554q_firmware",
"@product": "V554Q",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:v554_firmware",
"@product": "V554",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:v654q_firmware",
"@product": "V654Q",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:v754q_firmware",
"@product": "V754Q",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:v864q_firmware",
"@product": "V864Q",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:sharp-nec-displays:v984q_firmware",
"@product": "V984Q",
"@vendor": "Sharp NEC Display Solutions, Ltd.",
"@version": "2.2"
}
],
"sec:cvss": [
{
"@score": "10.0",
"@severity": "High",
"@type": "Base",
"@vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"@version": "2.0"
},
{
"@score": "9.8",
"@severity": "Critical",
"@type": "Base",
"@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"@version": "3.0"
}
],
"sec:identifier": "JVNDB-2021-000081",
"sec:references": [
{
"#text": "https://jvn.jp/en/jp/JVN42866574/index.html",
"@id": "JVN#42866574",
"@source": "JVN"
},
{
"#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20698",
"@id": "CVE-2021-20698",
"@source": "CVE"
},
{
"#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20699",
"@id": "CVE-2021-20699",
"@source": "CVE"
},
{
"#text": "https://nvd.nist.gov/vuln/detail/CVE-2021-20698",
"@id": "CVE-2021-20698",
"@source": "NVD"
},
{
"#text": "https://nvd.nist.gov/vuln/detail/CVE-2021-20699",
"@id": "CVE-2021-20699",
"@source": "NVD"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-119",
"@title": "Buffer Errors(CWE-119)"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-Other",
"@title": "No Mapping(CWE-Other)"
}
],
"title": "Multiple vulnerabilities in Sharp NEC Display Solutions\u0027 public displays"
}