CVE-2017-12861
CriticalSummary
The Epson 'EasyMP' software allows remote streaming from a user's computer to projectors. All Epson projectors supporting this software are vulnerable to a brute-force attack, enabling an attacker to remotely control and stream to the vulnerable device.
Risk Assessment
An attacker on the network can gain full control over the projector, potentially leading to unauthorized access to displayed content and privacy breaches.
Recommendation
It is recommended to secure the network and implement additional authorization mechanisms to restrict access to projectors using 'EasyMP' software.
Original NVD description (English source)
The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using a unique 4-digit code, displayed on-screen - ensuring only those who can view it are streaming.All Epson projectors supporting the "EasyMP" software are vulnerable to a brute-force vulnerability, allowing any attacker on the network to remotely control and stream to the vulnerable device