CRITICAL🇵🇱 Wersja polska

CVE-2017-12860

CVSS 9.8v3.0pub. 2017-10-10upd. 2026-05-13

The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using a unique 4-digit code, displayed on-screen - ensuring only those who can view it are streaming.In addition to the password, each projector has a hardcoded "backdoor" code (2270), which authenticates to all devices.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Epson Easymp

    APP
    Epson
    2.86
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2017-12861CRITICAL9.8PL ✓same product

Epson EasyMP — brute-force kodu PIN umożliwia przejęcie projektora

CVE-2026-23767CRITICAL9.8PL ✓same vendor

Brak uwierzytelniania i szyfrowania w protokole ESC/POS urządzeń Epson

CVE-2022-36133CRITICAL9.1PL ✓same vendor

Pominięcie uwierzytelnienia w WebConfig urządzeń Epson TM-C3500/TM-C7500

CVE-2020-28929CRITICAL9.8PL ✓same vendor

EPSON EPS TSE Server 8 — nieautoryzowany dostęp do poświadczeń administratora

CVE-2020-6091CRITICAL9.1PL ✓same vendor

Pominięcie uwierzytelniania w EPSON Web Control (Epson EB-1470Ui)