PT-2017-12735 · Epson · Epson Easymp

Published 2017-10-10 · Updated 2019-10-03 · CVE-2017-12861

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Epson EasyMP software (affected versions not specified)

Description The issue concerns a brute-force vulnerability in the Epson "EasyMP" software, which allows remote streaming of a user's computer to supporting projectors. The software uses a unique 4-digit code for authentication, but this can be bypassed by an attacker on the network, enabling them to remotely control and stream to the vulnerable device.

Recommendations For all affected versions, consider restricting network access to the Epson projectors to minimize the risk of exploitation. As a temporary workaround, limit the use of the "EasyMP" software until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-521

Related Identifiers

CVE-2017-12861

Affected Products

Epson Easymp

References · 3

• https://osv.dev/vulnerability/CVE-2017-12861 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-12861 · Security Note
• https://rhinosecuritylabs.com/research/epson-easymp-remote-projection-vulnerabilities · Note