PT-2017-12735 · Epson · Epson Easymp

Publicado 2017-10-10 · Atualizado 2019-10-03 · CVE-2017-12861

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Epson EasyMP software (affected versions not specified)

Description The issue concerns a brute-force vulnerability in the Epson "EasyMP" software, which allows remote streaming of a user's computer to supporting projectors. The software uses a unique 4-digit code for authentication, but this can be bypassed by an attacker on the network, enabling them to remotely control and stream to the vulnerable device.

Recommendations For all affected versions, consider restricting network access to the Epson projectors to minimize the risk of exploitation. As a temporary workaround, limit the use of the "EasyMP" software until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-521

Identificadores relacionados

CVE-2017-12861

Produtos afetados

Epson Easymp

Referências · 3

• https://osv.dev/vulnerability/CVE-2017-12861 · Aviso do Fabricante
• https://rhinosecuritylabs.com/research/epson-easymp-remote-projection-vulnerabilities · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-12861 · Nota de Segurança