CVE-2020-9453 - In Epson iProjection v2.30, the driver file EMP_MPAU.sys allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402406 and IOCtl 0x9C40240A

Back Back to CVE browser

MEDIUM

In Epson iProjection v2.30, the driver file EMP_MPAU.sys allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402406 and IOCtl 0x9C40240A

Published Feb 5, 2021

5.5

MEDIUM

CVSS 3.1

EPSS 0.39%

Description

In Epson iProjection v2.30, the driver file EMP_MPAU.sys allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402406 and IOCtl 0x9C40240A. (0x9C402402 has only a NULL pointer dereference.) This affects \Device\EMPMPAUIO and \DosDevices\EMPMPAU.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (5)

https://epson.com
x_refsource_MISCProduct
https://epson.com/Support/wa00936
x_refsource_MISCPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30272
Advisory
https://github.com/FULLSHADE/Kernel-exploits
x_refsource_MISCPatchThird Party Advisory
https://github.com/FULLSHADE/Kernel-exploits/tree/master/EMP_MPAU.sys
x_refsource_MISCPatchThird Party Advisory

Link	Providers	Tags
https://epson.com		x_refsource_MISCProduct
https://epson.com/Support/wa00936		x_refsource_MISCPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30272		Advisory
https://github.com/FULLSHADE/Kernel-exploits		x_refsource_MISCPatchThird Party Advisory
https://github.com/FULLSHADE/Kernel-exploits/tree/master/EMP_MPAU.sys		x_refsource_MISCPatchThird Party Advisory