CWE-1242
Inclusion of Undocumented Features or Chicken Bits
The device includes chicken bits or undocumented features that can create entry points for unauthorized actors.
CVE-2017-20204 (GCVE-0-2017-20204)
Vulnerability from cvelistv5
Published
2025-10-15 01:20
Modified
2025-10-15 19:56
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-1242 - Inclusion of Undocumented Features or Chicken Bits
Summary
DBLTek GoIP devices (models GoIP 1, 4, 8, 16, and 32) contain an undocumented vendor backdoor in the Telnet administrative interface that allows remote authentication as an undocumented user via a proprietary challenge–response scheme which is fundamentally flawed. Because the challenge response can be computed from the challenge itself, a remote attacker can authenticate without knowledge of a secret and obtain a root shell on the device. This can lead to persistent remote code execution, full device compromise, and arbitrary control of the device and any managed services. The firmware used within these devices was updated in December 2016 to make this vulnerability more complex to exploit. However, it is unknown if DBLTek has taken steps to fully mitigate.
References
| URL | Tags | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| DBL Technology (DBLTek) | GoIP |
Version: * |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2017-20204",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-10-15T19:53:59.880259Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-10-15T19:56:35.584Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "GoIP",
"vendor": "DBL Technology (DBLTek)",
"versions": [
{
"status": "affected",
"version": "*"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "SpiderLabs/Trustwave/LevelBlue"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "DBLTek GoIP devices (models GoIP 1, 4, 8, 16, and 32) contain an undocumented vendor backdoor in the Telnet administrative interface that allows remote authentication as an undocumented user via a proprietary challenge\u2013response scheme which is fundamentally flawed. Because the challenge response can be computed from the challenge itself, a remote attacker can authenticate without knowledge of a secret and obtain a root shell on the device. This can lead to persistent remote code execution, full device compromise, and arbitrary control of the device and any managed services. The firmware used within these devices was updated in December 2016 to make this vulnerability more complex to exploit. However, it is unknown if DBLTek has taken steps to fully mitigate."
}
],
"value": "DBLTek GoIP devices (models GoIP 1, 4, 8, 16, and 32) contain an undocumented vendor backdoor in the Telnet administrative interface that allows remote authentication as an undocumented user via a proprietary challenge\u2013response scheme which is fundamentally flawed. Because the challenge response can be computed from the challenge itself, a remote attacker can authenticate without knowledge of a secret and obtain a root shell on the device. This can lead to persistent remote code execution, full device compromise, and arbitrary control of the device and any managed services. The firmware used within these devices was updated in December 2016 to make this vulnerability more complex to exploit. However, it is unknown if DBLTek has taken steps to fully mitigate."
}
],
"impacts": [
{
"capecId": "CAPEC-443",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-443 Malicious Logic Inserted Into Product by Authorized Developer"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1242",
"description": "CWE-1242 Inclusion of Undocumented Features or Chicken Bits",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-10-15T01:20:42.502Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"tags": [
"product"
],
"url": "http://www.dbltek.com/"
},
{
"tags": [
"technical-description",
"exploit"
],
"url": "https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/undocumented-backdoor-account-in-dbltek-goip/"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/JacobMisirian/DblTekGoIPPwn"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/dbltek-goip-telnet-admin-interface-undocumented-backdoor"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "DBLTek GoIP Telnet Admin Interface Undocumented Backdoor",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2017-20204",
"datePublished": "2025-10-15T01:20:42.502Z",
"dateReserved": "2025-10-14T15:02:13.120Z",
"dateUpdated": "2025-10-15T19:56:35.584Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-4469 (GCVE-0-2021-4469)
Vulnerability from cvelistv5
Published
2025-11-14 22:53
Modified
2025-11-17 14:38
Severity ?
VLAI Severity ?
EPSS score ?
CWE
Summary
Denver SHO-110 IP cameras expose a secondary HTTP service on TCP port 8001 that provides access to a '/snapshot' endpoint without authentication. While the primary web interface on port 80 enforces authentication, the backdoor service allows any remote attacker to retrieve image snapshots by directly requesting the 'snapshot' endpoint. An attacker can repeatedly collect snapshots and reconstruct the camera stream, compromising the confidentiality of the monitored environment.
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2021-4469",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-11-17T14:38:14.369155Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-11-17T14:38:39.748Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:h:denver:i:sho-110:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "SHO-110",
"vendor": "Denver",
"versions": [
{
"status": "affected",
"version": "0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Ivan Nikolsky (enty8080)"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Denver SHO-110 IP cameras expose a secondary HTTP service on TCP port 8001 that provides access to a \u0027/snapshot\u0027 endpoint without authentication. While the primary web interface on port 80 enforces authentication, the backdoor service allows any remote attacker to retrieve image snapshots by directly requesting the \u0027snapshot\u0027 endpoint. An attacker can repeatedly collect snapshots and reconstruct the camera stream, compromising the confidentiality of the monitored environment."
}
],
"value": "Denver SHO-110 IP cameras expose a secondary HTTP service on TCP port 8001 that provides access to a \u0027/snapshot\u0027 endpoint without authentication. While the primary web interface on port 80 enforces authentication, the backdoor service allows any remote attacker to retrieve image snapshots by directly requesting the \u0027snapshot\u0027 endpoint. An attacker can repeatedly collect snapshots and reconstruct the camera stream, compromising the confidentiality of the monitored environment."
}
],
"impacts": [
{
"capecId": "CAPEC-36",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-36 Using Unpublished Interfaces or Functionality"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306 Missing Authentication for Critical Function",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-1242",
"description": "CWE-1242 Inclusion of Undocumented Features or Chicken Bits",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-11-16T13:06:32.465Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://www.exploit-db.com/exploits/50162"
},
{
"tags": [
"product"
],
"url": "http://old.denver.eu/products/smart-home-security/denver-sho-110/c-1024/c-1243/p-3826"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/denver-sho-110-ip-camera-unauthenticated-snapshot-access"
}
],
"source": {
"discovery": "UNKNOWN"
},
"tags": [
"unsupported-when-assigned"
],
"timeline": [
{
"lang": "en",
"time": "2021-07-29T16:00:00.000Z",
"value": "ExploitDB-50162 is publicly disclosed."
}
],
"title": "Denver SHO-110 IP Camera Unauthenticated Snapshot Access",
"x_generator": {
"engine": "vulncheck"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2021-4469",
"datePublished": "2025-11-14T22:53:04.754Z",
"dateReserved": "2025-11-14T20:33:38.739Z",
"dateUpdated": "2025-11-17T14:38:39.748Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2024-7011 (GCVE-0-2024-7011)
Vulnerability from cvelistv5
Published
2024-09-27 02:45
Modified
2025-12-08 15:51
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-1242 - Inclusion of Undocumented Features or Chicken Bits
Summary
Sharp NEC Projectors (NP-CB4500UL, NP-CB4500WL, NP-CB4700UL, NP-P525UL, NP-P525UL+, NP-P525ULG, NP-P525ULJL, NP-P525WL, NP-P525WL+, NP-P525WLG, NP-P525WLJL, NP-CG6500UL, NP-CG6500WL, NP-CG6700UL, NP-P605UL, NP-P605UL+, NP-P605ULG, NP-P605ULJL, NP-CA4120X, NP-CA4160W, NP-CA4160X, NP-CA4200U, NP-CA4200W, NP-CA4202W, NP-CA4260X, NP-CA4300X, NP-CA4355X, NP-CD2100U, NP-CD2120X, NP-CD2300X, NP-CR2100X, NP-CR2170W, NP-CR2170X, NP-CR2200U, NP-CR2200W, NP-CR2280X, NP-CR2310X, NP-CR2350X, NP-MC302XG, NP-MC332WG, NP-MC332WJL, NP-MC342XG, NP-MC372X, NP-MC372XG, NP-MC382W, NP-MC382WG, NP-MC422XG, NP-ME342UG, NP-ME372W, NP-ME372WG, NP-ME372WJL, NP-ME382U, NP-ME382UG, NP-ME382UJL, NP-ME402X, NP-ME402XG, NP-ME402XJL, NP-CB4500XL, NP-CG6400UL, NP-CG6400WL, NP-CG6500XL, NP-PE455UL, NP-PE455ULG, NP-PE455WL, NP-PE455WLG, NP-PE505XLG, NP-CB4600U, NP-CF6600U, NP-P474U, NP-P554U, NP-P554U+, NP-P554UG, NP-P554UJL, NP-CG6600UL, NP-P547UL, NP-P547ULG, NP-P547ULJL, NP-P607UL+, NP-P627UL, NP-P627UL+, NP-P627ULG, NP-P627ULJL, NP-PV710UL-B, NP-PV710UL-B1, NP-PV710UL-W, NP-PV710UL-W+, NP-PV710UL-W1, NP-PV730UL-BJL, NP-PV730UL-WJL, NP-PV800UL-B, NP-PV800UL-B+, NP-PV800UL-B1, NP-PV800UL-BJL, NP-PV800UL-W, NP-PV800UL-W+, NP-PV800UL-W1, NP-PV800UL-WJL, NP-CA4200X, NP-CA4265X, NP-CA4300U, NP-CA4300W, NP-CA4305X, NP-CA4400X, NP-CD2125X, NP-CD2200W, NP-CD2300U, NP-CD2310X, NP-CR2105X, NP-CR2200X, NP-CR2205W, NP-CR2300U, NP-CR2300W, NP-CR2315X, NP-CR2400X, NP-MC333XG, NP-MC363XG, NP-MC393WJL, NP-MC423W, NP-MC423WG, NP-MC453X, NP-MC453X, NP-MC453XG, NP-MC453XJL, NP-ME383WG, NP-ME403U, NP-ME403UG, NP-ME403UJL, NP-ME423W, NP-ME423WG, NP-ME423WJL, NP-ME453X, NP-ME453XG, NP-CB4400USL, NP-CB4400WSL, NP-CB4510UL, NP-CB4510WL, NP-CB4510XL, NP-CB4550USL, NP-CB6700UL, NP-CG6510UL, NP-PE456USL, NP-PE456USLG, NP-PE456USLJL, NP-PE456WSLG, NP-PE506UL, NP-PE506ULG, NP-PE506ULJL, NP-PE506WL, NP-PE506WLG, NP-PE506WLJL) allows an attacker to cause a denial-of-service (DoS) condition via SNMP service.
References
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Sharp Display Solutions, Ltd. | NP-CB4500UL |
Version: 0 < updated projector firmware |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-7011",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-09-27T14:20:39.329947Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-05T20:07:10.772Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "NP-CB4500UL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CB4500WL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CB4700UL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-P525UL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-P525UL+",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-P525ULG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-P525ULJL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-P525WL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-P525WL+",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-P525WLG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-P525WLJL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CG6500UL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CG6500WL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CG6700UL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-P605UL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-P605UL+",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-P605ULG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-P605ULJL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CA4120X",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CA4160W",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CA4160X",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CA4200U",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CA4200W",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CA4202W",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CA4260X",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CA4300X",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CA4355X",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CD2100U",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CD2120X",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CD2300X",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CR2100X",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CR2170W",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CR2170X",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CR2200U",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CR2200W",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CR2280X",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CR2310X",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CR2350X",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-MC302XG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-MC332WG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-MC332WJL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-MC342XG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-MC372X",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-MC372XG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-MC382W",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-MC382WG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-MC422XG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-ME342UG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-ME372W",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-ME372WG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-ME372WJL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-ME382U",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-ME382UG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-ME382UJL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-ME402X",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-ME402XG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-ME402XJL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CB4500XL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CG6400UL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CG6400WL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CG6500XL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PE455UL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PE455ULG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PE455WL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PE455WLG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PE505XLG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CB4600U",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CF6600U",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-P474U",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-P554U",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-P554U+",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-P554UG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-P554UJL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CG6600UL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-P547UL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-P547ULG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-P547ULJL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-P607UL+",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-P627UL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-P627UL+",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-P627ULG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-P627ULJL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PV710UL-B",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PV710UL-B1",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PV710UL-W",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PV710UL-W+",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PV710UL-W1",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PV730UL-BJL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PV730UL-WJL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PV800UL-B",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PV800UL-B+",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PV800UL-B1",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PV800UL-BJL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PV800UL-W",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PV800UL-W+",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PV800UL-W1",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PV800UL-WJL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CA4200X",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CA4265X",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CA4300U",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CA4300W",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CA4305X",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CA4400X",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CD2125X",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CD2200W",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CD2300U",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CD2310X",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CR2105X",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CR2200X",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CR2205W",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CR2300U",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CR2300W",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CR2315X",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CR2400X",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-MC333XG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-MC363XG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-MC393WJL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-MC423W",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-MC423WG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-MC453X",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-MC453X",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-MC453XG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-MC453XJL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-ME383WG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-ME403U",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-ME403UG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-ME403UJL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-ME423W",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-ME423WG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-ME423WJL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-ME453X",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-ME453XG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CB4400USL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CB4400WSL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CB4510UL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CB4510WL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CB4510XL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CB4550USL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CB6700UL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-CG6510UL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PE456USL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PE456USLG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PE456USLJL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PE456WSLG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PE506UL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PE506ULG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PE506ULJL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PE506WL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PE506WLG",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "NP-PE506WLJL",
"vendor": "Sharp Display Solutions, Ltd.",
"versions": [
{
"lessThan": "updated projector firmware",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Southern Metropolitan Cemeteries Trust JP Hofmeyr"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eSharp NEC Projectors (NP-CB4500UL, NP-CB4500WL, NP-CB4700UL, NP-P525UL, NP-P525UL+, NP-P525ULG, NP-P525ULJL, NP-P525WL, NP-P525WL+, NP-P525WLG, NP-P525WLJL, NP-CG6500UL, NP-CG6500WL, NP-CG6700UL, NP-P605UL, NP-P605UL+, NP-P605ULG, NP-P605ULJL, NP-CA4120X, NP-CA4160W, NP-CA4160X, NP-CA4200U, NP-CA4200W, NP-CA4202W, NP-CA4260X, NP-CA4300X, NP-CA4355X, NP-CD2100U, NP-CD2120X, NP-CD2300X, NP-CR2100X, NP-CR2170W, NP-CR2170X, NP-CR2200U, NP-CR2200W, NP-CR2280X, NP-CR2310X, NP-CR2350X, NP-MC302XG, NP-MC332WG, NP-MC332WJL, NP-MC342XG, NP-MC372X, NP-MC372XG, NP-MC382W, NP-MC382WG, NP-MC422XG, NP-ME342UG, NP-ME372W, NP-ME372WG, NP-ME372WJL, NP-ME382U, NP-ME382UG, NP-ME382UJL, NP-ME402X, NP-ME402XG, NP-ME402XJL, NP-CB4500XL, NP-CG6400UL, NP-CG6400WL, NP-CG6500XL, NP-PE455UL, NP-PE455ULG, NP-PE455WL, NP-PE455WLG, NP-PE505XLG, NP-CB4600U, NP-CF6600U, NP-P474U, NP-P554U, NP-P554U+, NP-P554UG, NP-P554UJL, NP-CG6600UL, NP-P547UL, NP-P547ULG, NP-P547ULJL, NP-P607UL+, NP-P627UL, NP-P627UL+, NP-P627ULG, NP-P627ULJL, NP-PV710UL-B, NP-PV710UL-B1, NP-PV710UL-W, NP-PV710UL-W+, NP-PV710UL-W1, NP-PV730UL-BJL, NP-PV730UL-WJL, NP-PV800UL-B, NP-PV800UL-B+, NP-PV800UL-B1, NP-PV800UL-BJL, NP-PV800UL-W, NP-PV800UL-W+, NP-PV800UL-W1, NP-PV800UL-WJL, NP-CA4200X, NP-CA4265X, NP-CA4300U, NP-CA4300W, NP-CA4305X, NP-CA4400X, NP-CD2125X, NP-CD2200W, NP-CD2300U, NP-CD2310X, NP-CR2105X, NP-CR2200X, NP-CR2205W, NP-CR2300U, NP-CR2300W, NP-CR2315X, NP-CR2400X, NP-MC333XG, NP-MC363XG, NP-MC393WJL, NP-MC423W, NP-MC423WG, NP-MC453X, NP-MC453X, NP-MC453XG, NP-MC453XJL, NP-ME383WG, NP-ME403U, NP-ME403UG, NP-ME403UJL, NP-ME423W, NP-ME423WG, NP-ME423WJL, NP-ME453X, NP-ME453XG, NP-CB4400USL, NP-CB4400WSL, NP-CB4510UL, NP-CB4510WL, NP-CB4510XL, NP-CB4550USL, NP-CB6700UL, NP-CG6510UL, NP-PE456USL, NP-PE456USLG, NP-PE456USLJL, NP-PE456WSLG, NP-PE506UL, NP-PE506ULG, NP-PE506ULJL, NP-PE506WL, NP-PE506WLG, NP-PE506WLJL) allows an attacker to cause a denial-of-service (DoS) condition via SNMP service.\u003c/p\u003e"
}
],
"value": "Sharp NEC Projectors (NP-CB4500UL, NP-CB4500WL, NP-CB4700UL, NP-P525UL, NP-P525UL+, NP-P525ULG, NP-P525ULJL, NP-P525WL, NP-P525WL+, NP-P525WLG, NP-P525WLJL, NP-CG6500UL, NP-CG6500WL, NP-CG6700UL, NP-P605UL, NP-P605UL+, NP-P605ULG, NP-P605ULJL, NP-CA4120X, NP-CA4160W, NP-CA4160X, NP-CA4200U, NP-CA4200W, NP-CA4202W, NP-CA4260X, NP-CA4300X, NP-CA4355X, NP-CD2100U, NP-CD2120X, NP-CD2300X, NP-CR2100X, NP-CR2170W, NP-CR2170X, NP-CR2200U, NP-CR2200W, NP-CR2280X, NP-CR2310X, NP-CR2350X, NP-MC302XG, NP-MC332WG, NP-MC332WJL, NP-MC342XG, NP-MC372X, NP-MC372XG, NP-MC382W, NP-MC382WG, NP-MC422XG, NP-ME342UG, NP-ME372W, NP-ME372WG, NP-ME372WJL, NP-ME382U, NP-ME382UG, NP-ME382UJL, NP-ME402X, NP-ME402XG, NP-ME402XJL, NP-CB4500XL, NP-CG6400UL, NP-CG6400WL, NP-CG6500XL, NP-PE455UL, NP-PE455ULG, NP-PE455WL, NP-PE455WLG, NP-PE505XLG, NP-CB4600U, NP-CF6600U, NP-P474U, NP-P554U, NP-P554U+, NP-P554UG, NP-P554UJL, NP-CG6600UL, NP-P547UL, NP-P547ULG, NP-P547ULJL, NP-P607UL+, NP-P627UL, NP-P627UL+, NP-P627ULG, NP-P627ULJL, NP-PV710UL-B, NP-PV710UL-B1, NP-PV710UL-W, NP-PV710UL-W+, NP-PV710UL-W1, NP-PV730UL-BJL, NP-PV730UL-WJL, NP-PV800UL-B, NP-PV800UL-B+, NP-PV800UL-B1, NP-PV800UL-BJL, NP-PV800UL-W, NP-PV800UL-W+, NP-PV800UL-W1, NP-PV800UL-WJL, NP-CA4200X, NP-CA4265X, NP-CA4300U, NP-CA4300W, NP-CA4305X, NP-CA4400X, NP-CD2125X, NP-CD2200W, NP-CD2300U, NP-CD2310X, NP-CR2105X, NP-CR2200X, NP-CR2205W, NP-CR2300U, NP-CR2300W, NP-CR2315X, NP-CR2400X, NP-MC333XG, NP-MC363XG, NP-MC393WJL, NP-MC423W, NP-MC423WG, NP-MC453X, NP-MC453X, NP-MC453XG, NP-MC453XJL, NP-ME383WG, NP-ME403U, NP-ME403UG, NP-ME403UJL, NP-ME423W, NP-ME423WG, NP-ME423WJL, NP-ME453X, NP-ME453XG, NP-CB4400USL, NP-CB4400WSL, NP-CB4510UL, NP-CB4510WL, NP-CB4510XL, NP-CB4550USL, NP-CB6700UL, NP-CG6510UL, NP-PE456USL, NP-PE456USLG, NP-PE456USLJL, NP-PE456WSLG, NP-PE506UL, NP-PE506ULG, NP-PE506ULJL, NP-PE506WL, NP-PE506WLG, NP-PE506WLJL) allows an attacker to cause a denial-of-service (DoS) condition via SNMP service."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1242",
"description": "CWE-1242: Inclusion of Undocumented Features or Chicken Bits",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-12-08T15:51:26.863Z",
"orgId": "f2760a35-e0d8-4637-ac4c-cc1a2de3e282",
"shortName": "NEC"
},
"references": [
{
"url": "https://sharp-displays.jp.sharp/global/support/info/Projector_vulnerability_202408.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "f2760a35-e0d8-4637-ac4c-cc1a2de3e282",
"assignerShortName": "NEC",
"cveId": "CVE-2024-7011",
"datePublished": "2024-09-27T02:45:05.979Z",
"dateReserved": "2024-07-23T04:53:07.799Z",
"dateUpdated": "2025-12-08T15:51:26.863Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-12176 (GCVE-0-2025-12176)
Vulnerability from cvelistv5
Published
2025-10-24 15:56
Modified
2025-10-24 19:56
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-1242 - Inclusion of Undocumented Features or Chicken Bits
Summary
Undocumented administrative accounts were getting created to facilitate access for applications running on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Azure Access Technology | BLU-IC2 |
Version: 0 ≤ 1.19.5 |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-12176",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-10-24T16:41:48.448092Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-10-24T19:56:09.959Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "BLU-IC2",
"vendor": "Azure Access Technology",
"versions": [
{
"lessThanOrEqual": "1.19.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "BLU-IC4",
"vendor": "Azure Access Technology",
"versions": [
{
"lessThanOrEqual": "1.19.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Kevin Schaller"
},
{
"lang": "en",
"type": "finder",
"value": "Benjamin Lafois"
},
{
"lang": "en",
"type": "finder",
"value": "Alexi Bitsios"
},
{
"lang": "en",
"type": "finder",
"value": "Sebastian Toscano"
},
{
"lang": "en",
"type": "finder",
"value": "Dominik Schneider"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Undocumented administrative accounts were getting created to facilitate access for applications running on board.\u003cp\u003eThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.\u003c/p\u003e"
}
],
"value": "Undocumented administrative accounts were getting created to facilitate access for applications running on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5."
}
],
"impacts": [
{
"capecId": "CAPEC-36",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-36 Using Unpublished Interfaces or Functionality"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 10,
"baseSeverity": "CRITICAL",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1242",
"description": "CWE-1242: Inclusion of Undocumented Features or Chicken Bits",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-10-24T15:56:07.959Z",
"orgId": "a0340c66-c385-4f8b-991b-3d05f6fd5220",
"shortName": "azure-access"
},
"references": [
{
"url": "https://azure-access.com/security-advisories"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Undocumented Administrative Accounts",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "a0340c66-c385-4f8b-991b-3d05f6fd5220",
"assignerShortName": "azure-access",
"cveId": "CVE-2025-12176",
"datePublished": "2025-10-24T15:56:07.959Z",
"dateReserved": "2025-10-24T15:51:46.644Z",
"dateUpdated": "2025-10-24T19:56:09.959Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2025-52548 (GCVE-0-2025-52548)
Vulnerability from cvelistv5
Published
2025-09-02 11:26
Modified
2025-09-02 13:28
Severity ?
VLAI Severity ?
EPSS score ?
CWE
Summary
E3 Site Supervisor Control (firmware version < 2.31F01) contains a hidden API call in the application services that enables SSH and Shellinabox, which exist but are disabled by default. An attacker with admin access to the application services can utilize this API to enable remote access to the underlying OS.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Copeland LP | E3 Supervisory Control |
Version: 0 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-52548",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-09-02T13:27:58.507057Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-09-02T13:28:08.207Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "affected",
"product": "E3 Supervisory Control",
"vendor": "Copeland LP",
"versions": [
{
"lessThan": "2.31F01",
"status": "affected",
"version": "0",
"versionType": "firmware"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Armis Labs"
}
],
"datePublic": "2025-07-29T12:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "E3 Site Supervisor Control (firmware version \u0026lt; 2.31F01) contains a hidden API call in the application services that enables SSH and Shellinabox, which exist but are disabled by default. An attacker with admin access to the application services can utilize this API to enable remote access to the underlying OS."
}
],
"value": "E3 Site Supervisor Control (firmware version \u003c 2.31F01) contains a hidden API call in the application services that enables SSH and Shellinabox, which exist but are disabled by default. An attacker with admin access to the application services can utilize this API to enable remote access to the underlying OS."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1242",
"description": "CWE-1242",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-09-02T11:26:08.636Z",
"orgId": "dd59f033-460c-4b88-a075-d4d3fedb6191",
"shortName": "Armis"
},
"references": [
{
"url": "https://www.armis.com/research/frostbyte10/"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Upgrade firmware of affected E3 Supervisory Controls to a version \u0026gt; 2.30F1.\u003cbr\u003e"
}
],
"value": "Upgrade firmware of affected E3 Supervisory Controls to a version \u003e 2.30F1."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Enabling SSH and Shellinabox on the vulnerable machine",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Restrict access to the E3 Supervisory Controls network interface (ETH 0) by use of restricted VLAN or subnet and / or network firewall. Ensure the restricted VLAN or subnet is never accessible from untrusted networks."
}
],
"value": "Restrict access to the E3 Supervisory Controls network interface (ETH 0) by use of restricted VLAN or subnet and / or network firewall. Ensure the restricted VLAN or subnet is never accessible from untrusted networks."
}
],
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "dd59f033-460c-4b88-a075-d4d3fedb6191",
"assignerShortName": "Armis",
"cveId": "CVE-2025-52548",
"datePublished": "2025-09-02T11:26:08.636Z",
"dateReserved": "2025-06-17T17:29:21.841Z",
"dateUpdated": "2025-09-02T13:28:08.207Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2025-55050 (GCVE-0-2025-55050)
Vulnerability from cvelistv5
Published
2025-09-09 18:56
Modified
2025-09-10 14:29
Severity ?
VLAI Severity ?
EPSS score ?
CWE
Summary
CWE-1242: Inclusion of Undocumented Features
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Baicells | NOVA430e/430i, NOVA436Q, NEUTRINO430, NOVA846 |
Version: BaiBLQ_3.0.12 and older versions. BaiBU_DNB4_2.4.9 and older versions |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-55050",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-09-10T14:14:42.350737Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-09-10T14:29:16.462Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "NOVA430e/430i, NOVA436Q, NEUTRINO430, NOVA846",
"vendor": "Baicells",
"versions": [
{
"status": "affected",
"version": "BaiBLQ_3.0.12 and older versions. BaiBU_DNB4_2.4.9 and older versions"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Shahaf Levi"
}
],
"datePublic": "2025-09-09T18:52:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "CWE-1242: Inclusion of Undocumented Features"
}
],
"value": "CWE-1242: Inclusion of Undocumented Features"
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1242",
"description": "CWE-1242",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-09-09T18:56:59.092Z",
"orgId": "a57ee1ae-c9c1-4f40-aa7b-cf10760fde3f",
"shortName": "INCD"
},
"references": [
{
"url": "https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0"
}
],
"source": {
"advisory": "ILVN-2025-0243",
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "a57ee1ae-c9c1-4f40-aa7b-cf10760fde3f",
"assignerShortName": "INCD",
"cveId": "CVE-2025-55050",
"datePublished": "2025-09-09T18:56:59.092Z",
"dateReserved": "2025-08-06T11:04:25.088Z",
"dateUpdated": "2025-09-10T14:29:16.462Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
Mitigation
Phases: Architecture and Design, Implementation
Description:
- The implementation of chicken bits in a released product is highly discouraged. If implemented at all, ensure that they are disabled in production devices. All interfaces to a device should be documented.
CAPEC-212: Functionality Misuse
An adversary leverages a legitimate capability of an application in such a way as to achieve a negative technical impact. The system functionality is not altered or modified but used in a way that was not intended. This is often accomplished through the overuse of a specific functionality or by leveraging functionality with design flaws that enables the adversary to gain access to unauthorized, sensitive data.
CAPEC-36: Using Unpublished Interfaces or Functionality
An adversary searches for and invokes interfaces or functionality that the target system designers did not intend to be publicly available. If interfaces fail to authenticate requests, the attacker may be able to invoke functionality they are not authorized for.