CVE Catalog

CVE-2021-43716

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.20%

11th percentile - higher than 11% of all known CVEs

Summary

A verification bypass vulnerability exists in EPSON 150075647YWWV110 EasyMP Network Updater Ver.1.20. The Epson projector can be updated by encrypted firmware through USB.

Risk Assessment

An attacker with physical access to the projector can install unauthorized firmware, potentially leading to device takeover or network compromise.

Recommendation

Update EasyMP Network Updater to the latest version and restrict physical access to projectors to trusted personnel only.

Original NVD description (English source)

Verification Bypass vulnerability exists in EPSON 150075647YWWV110 EasyMP Network Updater Ver.1.20. The Epson projector can be updated by encrypted firmware through USB.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS