JVN#61337171: SEIKO EPSON printer Web Config vulnerable to denial-of-service (DoS)

SEIKO EPSON printer Web Config contains a denial-of-service (DoS) vulnerability due to improper input validation (CWE-20).

Impact

The printer may be turned off by a remote attacker.

Solution

Apply workarounds
The developer strongly recommends users to apply workarounds, as the update firmware for the printers is not planned to be released.

For more information, refer to the information provided by the developer.

Products Affected

• Web Config
  Web Config is software that allows users to check the status and change the settings of SEIKO EPSON printers via a web browser.

Web Config is pre-installed on some printers provided by SEIKO EPSON CORPORATION. For the details of the affected product names/model numbers, refer to the information provided by the developer.