CVE-2017-12860
CriticalSummary
The Epson 'EasyMP' software allows remote streaming from a user's computer to projectors. Each device is authenticated using a unique 4-digit code, but projectors also have a hardcoded 'backdoor' code (2270) that grants access to all devices.
Risk Assessment
The presence of a hardcoded backdoor code poses a significant security risk, as it allows unauthorized access to projectors by third parties. This could lead to unauthorized data streaming or manipulation of presentations.
Recommendation
Users are advised to avoid using the default backdoor code and to regularly update the software to minimize risk. Additionally, consider restricting projector access to trusted users only.
Original NVD description (English source)
The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using a unique 4-digit code, displayed on-screen - ensuring only those who can view it are streaming.In addition to the password, each projector has a hardcoded "backdoor" code (2270), which authenticates to all devices.