Vulnerability · Published Feb 5, 2021 · Assigned by mitre
CVE-2020-9453
Medium 5.5
In plain English
A medium-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities).
Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.4%top 66.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
In Epson iProjection v2.30, the driver file EMP_MPAU.sys allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402406 and IOCtl 0x9C40240A. (0x9C402402 has only a NULL pointer dereference.) This affects \Device\EMPMPAUIO and \DosDevices\EMPMPAU.
Affected products (as reported)
References
- https://epson.com x_refsource_MISC
- https://github.com/FULLSHADE/Kernel-exploits x_refsource_MISC
- https://github.com/FULLSHADE/Kernel-exploits/tree/master/EMP_MPAU.sys x_refsource_MISC
- https://epson.com/Support/wa00936 x_refsource_MISC