CVE-2020-37064: epson epson easymp network projection Unquoted Search Path or Element

Vulnerability summary

CVE-2020-37064 is a high (CVSS 8.5) Unquoted Search Path or Element vulnerability in epson epson easymp network projection. EPSS estimates a 0.17% chance of exploitation in the next 30 days, higher than 5.8% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 01-02-2026
   PublishedVulnerability first disclosed.
2. 02-02-2026
   Last modifiedVulnerability information updated.

Description

EPSON EasyMP Network Projection 2.81 contains an unquoted service path vulnerability in the EMP_NSWLSV service that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files (x86)\EPSON Projector\EasyMP Network Projection V2\ to inject malicious code that would execute with LocalSystem privileges.

• CWE-428Unquoted Search Path or ElementThe product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.