The vulnerability of the software for controlling EPSON WebConfig and EPSON Web Control devices is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to device settings.

🗓️ 24 Nov 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

Remote attacker can bypass authentication limits to access EPSON WebConfig and Web Control device settings.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-64310	21 Nov 202503:03	–	circl
CNNVD	SEIKO EPSON Web Config和SEIKO EPSON Web Control 安全漏洞	21 Nov 202500:00	–	cnnvd
CVE	CVE-2025-64310	21 Nov 202502:36	–	cve
Cvelist	CVE-2025-64310	21 Nov 202502:36	–	cvelist
EUVD	EUVD-2025-198375	21 Nov 202502:36	–	euvd
Japan Vulnerability Notes	EPSON WebConfig / Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts	21 Nov 202506:31	–	jvn
NVD	CVE-2025-64310	21 Nov 202503:16	–	nvd
Positive Technologies	PT-2025-47659	20 Nov 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-64310	27 Nov 202513:54	–	redhatcve
Vulnrichment	CVE-2025-64310	21 Nov 202502:36	–	vulnrichment

Vulners

Node

seiko_epson eb-2265uRange<1.21

OR

seiko_epson eb-2245uRange<1.21

OR

seiko_epson eb-2165wRange<1.21

OR

seiko_epson eb-2155wRange<1.21

OR

seiko_epson eb-2140wRange<1.21

OR

seiko_epson eb-2065Range<1.21

OR

seiko_epson eb-2040Range<1.21

OR

seiko_epson eb-695wtRange<1.24

OR

seiko_epson eb-685wtRange<1.24

OR

seiko_epson eb-685wRange<1.24

OR

seiko_epson eb-680Range<1.24

OR

seiko_epson eb-1785wRange<1.11

OR

seiko_epson eb-1780wRange<1.11

OR

seiko_epson eb-1795fRange<1.11

OR

seiko_epson eb-1485ftRange<3.61

OR

seiko_epson eb-800fRange<3.61

OR

seiko_epson eb-805fRange<3.61

OR

seiko_epson eb-e01Range<2.16

OR

seiko_epson eb-x06Range<2.16

OR

seiko_epson eb-w06Range<2.16

OR

seiko_epson eb-fh52Range<2.16

OR

seiko_epson eh-tw750Range<2.16

OR

seiko_epson eb-982wRange<2.16

OR

seiko_epson eb-992fRange<2.16

OR

seiko_epson eb-l30000uRange<5.11

OR

seiko_epson eb-l30002uRange<5.11

OR

seiko_epson eb-l730uRange<1.41

OR

seiko_epson eb-l630uRange<1.41

OR

seiko_epson eb-l630wRange<1.41

OR

seiko_epson eb-l630suRange<1.41

OR

seiko_epson eb-pu1008wRange<2.65

OR

seiko_epson eb-pu1008bRange<2.65

OR

seiko_epson eb-pu1007wRange<2.65

OR

seiko_epson eb-pu1007bRange<2.65

OR

seiko_epson eb-pu2010wRange<2.65

OR

seiko_epson eb-pu2010bRange<2.65

OR

seiko_epson eb-pu2120wRange<2.62

OR

seiko_epson eb-pu2116wRange<2.62

OR

seiko_epson eb-pu2113wRange<2.62

OR

seiko_epson eb-pu2220bRange<2.62

OR

seiko_epson eb-pu2216bRange<2.62

OR

seiko_epson eb-pu2213bRange<2.62

OR

seiko_epson eb-pu2220sRange<2.62

OR

seiko_epson eb-pu2120sRange<2.62

OR

seiko_epson eb-l260fRange<1.62

OR

seiko_epson eb-l210wRange<1.62

OR

seiko_epson eb-l210swRange<1.62

OR

seiko_epson eb-770fiRange<1.62

OR

seiko_epson eb-770fRange<1.62

OR

seiko_epson eb-760wiRange<1.62

OR

seiko_epson eb-760wRange<1.62

OR

seiko_epson eb-810eRange<1.31

OR

seiko_epson eb-815eRange<1.31

OR

seiko_epson eb-pq2008wRange<1.71

OR

seiko_epson eb-pq2008bRange<1.71

OR

seiko_epson eb-pq2010bRange<1.71

OR

seiko_epson eb-pq2216wRange<1.71

OR

seiko_epson eb-pq2216bRange<1.71

OR

seiko_epson eb-pq2220bRange<1.71

OR

seiko_epson eb-l890eRange<2.00

OR

seiko_epson eb-l895eRange<2.00

OR

seiko_epson eb-l690eRange<2.00

OR

seiko_epson eb-l795seRange<2.00

OR

seiko_epson eb-l890uRange<2.00

OR

seiko_epson eb-l790uRange<2.00

OR

seiko_epson eb-l690uRange<2.00

OR

seiko_epson eb-l790suRange<2.00

OR

seiko_epson eb-l690seRange<2.00

OR

seiko_epson eb-l695seRange<2.00

OR

seiko_epson eb-fh08Range<1.03

OR

seiko_epson eb-w55Range<1.12

OR

seiko_epson eb-fh54Range<2.00

OR

seiko_epson eh-tw850Range<2.00

Source	Link
epson	www.epson.jp/support/misc_t/251120_oshirase.htm
web	www.web.nvd.nist.gov/view/vuln/detail

24 Nov 2025 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 39.8

CVSS 210

EPSS0.00413

EPSON WebConfig EPSON Web Control Remote attacker Unauthorized access Authentication limits Device settings