CVE-2017-12861 - The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using a unique 4-digit code, displayed on-screen - ensuring only those who can view it are streaming.All Epson projectors supporting the "EasyMP" software are vulnerable to a brute-force vulnerability, allowing any attacker on the network to remotely control and stream to the vulnerable device

Back Back to CVE browser

CRITICAL

The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using a unique 4-digit code, displayed on-screen - ensuring only those who can view it are streaming.All Epson projectors supporting the "EasyMP" software are vulnerable to a brute-force vulnerability, allowing any attacker on the network to remotely control and stream to the vulnerable device

Published Oct 10, 2017

9.8

CRITICAL

CVSS 3.0

EPSS 3.34%

Description

The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using a unique 4-digit code, displayed on-screen - ensuring only those who can view it are streaming.All Epson projectors supporting the "EasyMP" software are vulnerable to a brute-force vulnerability, allowing any attacker on the network to remotely control and stream to the vulnerable device

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-521

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-4396
Advisory
https://rhinosecuritylabs.com/research/epson-easymp-remote-projection-vulnerabilities/
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-4396		Advisory
https://rhinosecuritylabs.com/research/epson-easymp-remote-projection-vulnerabilities/		x_refsource_MISCThird Party Advisory