Epson EH-TW5350 — CVE-2021-43716, CVE-2021-43717, CVE-2021-43718

Tre vulnerabilità scoperte nel proiettore Epson EH-TW5350 (firmware 150075647YWWV110) dal team B-BEAM-BOB durante il programma KITRI Best of the Best (BoB), 2021. Gli ID CVE sono stati assegnati da MITRE il 2021-12-21 ma i record sono rimasti non pubblicati fino al 2026, quando questi advisory sono stati pubblicati come riferimento di divulgazione pubblica richiesto per completare il processo di pubblicazione dei CVE. Tutti e tre i record sono ora pubblicati nella CVE List.

Advisory	CVE Record	Type
CVE-2021-43716	CVE-2021-43716	Firmware update verification bypass
CVE-2021-43717	CVE-2021-43717	Use of hard-coded credentials
CVE-2021-43718	CVE-2021-43718	Web Control authentication bypass

Team

B-BEAM-BOB, KITRI Best of the Best (BoB):

• Tae-Hoon Ha (@dpfkdlemtp)
• Jae-Yong Lee (@Kim-mongyong)
• Seung-Min Kang (@tmdals010126)
• Kwang-Ryeol Kim (@k07713)
• Won-Been Im (@D0b6ywb)
• Yu-Taek Jun (@r3dzone)

Disclosure timeline

• 2021-11: Vulnerabilities discovered and internally documented.
• 2021: Reported to Epson.
• 2021-12-21: CVE IDs assigned by MITRE (ticket scr1172475), pending publication.
• 2026-08: Public advisories published to complete the CVE record publication process.
• 2026-08-18: CVE-2021-43716, CVE-2021-43717 and CVE-2021-43718 published to the CVE List by MITRE.