5.5

CVE-2020-9014

In Epson iProjection v2.30, the driver file (EMP_NSAU.sys) allows local users to cause a denial of service (BSOD) via crafted input to the virtual audio device driver with IOCTL 0x9C402402, 0x9C402406, or 0x9C40240A. \Device\EMPNSAUIO and \DosDevices\EMPNSAU are similarly affected.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Epson ≫ Iprojection Version <= 2.30
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.37% 0.287
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://github.com/FULLSHADE/Kernel-exploits
Patch
Third Party Advisory
https://epson.com/Support/wa00935
Patch
Vendor Advisory
https://epson.com/wireless-projector-app
Product
https://github.com/FULLSHADE/Kernel-exploits/tree/master/EMP_NSAU.sys
Patch
Third Party Advisory