Vulnerabilities > CVE-2020-9014 - Unspecified vulnerability in Epson Iprojection 2.30
Attack vector
LOCAL Attack complexity
LOW Privileges required
LOW Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
In Epson iProjection v2.30, the driver file (EMP_NSAU.sys) allows local users to cause a denial of service (BSOD) via crafted input to the virtual audio device driver with IOCTL 0x9C402402, 0x9C402406, or 0x9C40240A. \Device\EMPNSAUIO and \DosDevices\EMPNSAU are similarly affected.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
References
- https://epson.com/Support/wa00935
- https://epson.com/Support/wa00935
- https://epson.com/wireless-projector-app
- https://epson.com/wireless-projector-app
- https://github.com/FULLSHADE/Kernel-exploits
- https://github.com/FULLSHADE/Kernel-exploits
- https://github.com/FULLSHADE/Kernel-exploits/tree/master/EMP_NSAU.sys
- https://github.com/FULLSHADE/Kernel-exploits/tree/master/EMP_NSAU.sys