Denial of Service Vulnerability in Epson iProjection Driver
CVE-2020-9453

5.5MEDIUM

Key Information:

Vendor

Epson

Status
Iprojection
Vendor
CVE Published:
5 February 2021

What is CVE-2020-9453?

In Epson iProjection version 2.30, a vulnerability exists in the driver file EMP_MPAU.sys that allows local users to trigger a denial of service. This occurs due to improper validation of input values from specific IOCTL commands, particularly 0x9C402406 and 0x9C40240A. An attacker can exploit this flaw to cause a Blue Screen of Death (BSOD) or potentially gain other unspecified impacts, affecting the system's stability and functionality.

References

https://epson.com
x_refsource_MISC
https://github.com/FULLSHADE/Kernel-exploits
x_refsource_MISC
https://github.com/FULLSHADE/Kernel-exploits/tree/master/...
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.