Epson EH-TW5350 Security Advisories (B-BEAM-BOB)

Three vulnerabilities discovered in the Epson EH-TW5350 projector (firmware 150075647YWWV110) by team B-BEAM-BOB during the KITRI Best of the Best (BoB) program, 2021. CVE IDs were assigned by MITRE on 2021-12-21 but the records remained unpublished until 2026, when these advisories were published as the public disclosure reference required to complete the CVE publication process. All three records are now published on the CVE List.

Advisory	CVE Record	Type
CVE-2021-43716	CVE-2021-43716	Firmware update verification bypass
CVE-2021-43717	CVE-2021-43717	Use of hard-coded credentials
CVE-2021-43718	CVE-2021-43718	Web Control authentication bypass

Team

B-BEAM-BOB, KITRI Best of the Best (BoB):

• Tae-Hoon Ha (@dpfkdlemtp)
• Jae-Yong Lee (@Kim-mongyong)
• Seung-Min Kang (@tmdals010126)
• Kwang-Ryeol Kim (@k07713)
• Won-Been Im (@D0b6ywb)
• Yu-Taek Jun (@r3dzone)

Disclosure timeline

• 2021-11: Vulnerabilities discovered and internally documented.
• 2021: Reported to Epson.
• 2021-12-21: CVE IDs assigned by MITRE (ticket scr1172475), pending publication.
• 2026-08: Public advisories published to complete the CVE record publication process.
• 2026-08-18: CVE-2021-43716, CVE-2021-43717 and CVE-2021-43718 published to the CVE List by MITRE.