EPSON Printers HTTP Request/Response Splitting (CVE-2018-0689)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(505073);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/02/06");

  script_cve_id("CVE-2018-0689");

  script_name(english:"EPSON Printers HTTP Request/Response Splitting (CVE-2018-0689)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"HTTP header injection vulnerability in SEIKO EPSON printers and
scanners (DS-570W firmware versions released prior to 2018 March 13,
DS-780N firmware versions released prior to 2018 March 13, EP-10VA
firmware versions released prior to 2017 September 4, EP-30VA firmware
versions released prior to 2017 June 19, EP-707A firmware versions
released prior to 2017 August 1, EP-708A firmware versions released
prior to 2017 August 7, EP-709A firmware versions released prior to
2017 June 12, EP-777A firmware versions released prior to 2017 August
1, EP-807AB/AW/AR firmware versions released prior to 2017 August 1,
EP-808AB/AW/AR firmware versions released prior to 2017 August 7,
EP-879AB/AW/AR firmware versions released prior to 2017 June 12,
EP-907F firmware versions released prior to 2017 August 1, EP-977A3
firmware versions released prior to 2017 August 1, EP-978A3 firmware
versions released prior to 2017 August 7, EP-979A3 firmware versions
released prior to 2017 June 12, EP-M570T firmware versions released
prior to 2017 September 6, EW-M5071FT firmware versions released prior
to 2017 November 2, EW-M660FT firmware versions released prior to 2018
April 19, EW-M770T firmware versions released prior to 2017 September
6, PF-70 firmware versions released prior to 2018 April 20, PF-71
firmware versions released prior to 2017 July 18, PF-81 firmware
versions released prior to 2017 September 14, PX-048A firmware
versions released prior to 2017 July 4, PX-049A firmware versions
released prior to 2017 September 11, PX-437A firmware versions
released prior to 2017 July 24, PX-M350F firmware versions released
prior to 2018 February 23, PX-M5040F firmware versions released prior
to 2017 November 20, PX-M5041F firmware versions released prior to
2017 November 20, PX-M650A firmware versions released prior to 2017
October 17, PX-M650F firmware versions released prior to 2017 October
17, PX-M680F firmware versions released prior to 2017 June 29,
PX-M7050F firmware versions released prior to 2017 October 13,
PX-M7050FP firmware versions released prior to 2017 October 13,
PX-M7050FX firmware versions released prior to 2017 November 7,
PX-M7070FX firmware versions released prior to 2017 April 27, PX-M740F
firmware versions released prior to 2017 December 4, PX-M741F firmware
versions released prior to 2017 December 4, PX-M780F firmware versions
released prior to 2017 June 29, PX-M781F firmware versions released
prior to 2017 June 27, PX-M840F firmware versions released prior to
2017 November 16, PX-M840FX firmware versions released prior to 2017
December 8, PX-M860F firmware versions released prior to 2017 October
25, PX-S05B/W firmware versions released prior to 2018 March 9,
PX-S350 firmware versions released prior to 2018 February 23, PX-S5040
firmware versions released prior to 2017 November 20, PX-S7050
firmware versions released prior to 2018 February 21, PX-S7050PS
firmware versions released prior to 2018 February 21, PX-S7050X
firmware versions released prior to 2017 November 7, PX-S7070X
firmware versions released prior to 2017 April 27, PX-S740 firmware
versions released prior to 2017 December 3, PX-S840 firmware versions
released prior to 2017 November 16, PX-S840X firmware versions
released prior to 2017 December 8, PX-S860 firmware versions released
prior to 2017 December 7) may allow a remote attackers to lead a user
to a phishing site or execute an arbitrary script on the user's web
browser.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  script_set_attribute(attribute:"see_also", value:"https://jvn.jp/en/jp/JVN89767228/index.html");
  script_set_attribute(attribute:"see_also", value:"https://www.epson.jp/support/misc/20181203_oshirase.htm");
  script_set_attribute(attribute:"solution", value:
"Refer to the vendor advisory.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2018-0689");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(113);

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/01/09");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/01/09");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/02/05");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:ds-570w_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:ds-780n_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:ep-10va_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:ep-30va_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:ep-707a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:ep-708a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:ep-709a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:ep-777a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:ep-807ab_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:ep-807ar_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:ep-807aw_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:ep-808ab_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:ep-808ar_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:ep-808aw_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:ep-879ab_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:ep-879ar_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:ep-879aw_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:ep-907f_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:ep-977a3_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:ep-978a3_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:ep-979a3_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:ep-m570t_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:ew-m5071ft_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:ew-m660ft_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:ew-m770t_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:pf-70_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:pf-71_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:pf-81_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-048a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-049a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-437a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-m350f_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-m5040f_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-m5041f_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-m650a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-m650f_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-m680f_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-m7050f_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-m7050fp_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-m7050fx_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-m7070fx_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-m740f_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-m781f_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-m840f_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-m840fx_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-m860f_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-s05b_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-s05w_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-s350_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-s5040_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-s7050_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-s7050ps_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-s7050x_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-s7070x_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-s740_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-s840_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-s840x_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:px-s860_firmware");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/EPSON");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/EPSON');

var asset = tenable_ot::assets::get(vendor:'EPSON');

var vuln_cpes = {
    "cpe:/o:epson:ds-570w_firmware" :
        {"versionEndExcluding" : "2018-03-13", "family" : "EPSON"},
    "cpe:/o:epson:ds-780n_firmware" :
        {"versionEndExcluding" : "2018-03-13", "family" : "EPSON"},
    "cpe:/o:epson:ep-10va_firmware" :
        {"versionEndExcluding" : "2017-09-04", "family" : "EPSON"},
    "cpe:/o:epson:ep-30va_firmware" :
        {"versionEndExcluding" : "2017-06-19", "family" : "EPSON"},
    "cpe:/o:epson:ep-707a_firmware" :
        {"versionEndExcluding" : "2017-08-01", "family" : "EPSON"},
    "cpe:/o:epson:ep-708a_firmware" :
        {"versionEndExcluding" : "2017-08-07", "family" : "EPSON"},
    "cpe:/o:epson:ep-709a_firmware" :
        {"versionEndExcluding" : "2017-06-12", "family" : "EPSON"},
    "cpe:/o:epson:ep-777a_firmware" :
        {"versionEndExcluding" : "2017-08-01", "family" : "EPSON"},
    "cpe:/o:epson:ep-807ab_firmware" :
        {"versionEndExcluding" : "2017-08-01", "family" : "EPSON"},
    "cpe:/o:epson:ep-807aw_firmware" :
        {"versionEndExcluding" : "2017-08-01", "family" : "EPSON"},
    "cpe:/o:epson:ep-807ar_firmware" :
        {"versionEndExcluding" : "2017-08-01", "family" : "EPSON"},
    "cpe:/o:epson:ep-808ab_firmware" :
        {"versionEndExcluding" : "2017-08-07", "family" : "EPSON"},
    "cpe:/o:epson:ep-808aw_firmware" :
        {"versionEndExcluding" : "2017-08-07", "family" : "EPSON"},
    "cpe:/o:epson:ep-808ar_firmware" :
        {"versionEndExcluding" : "2017-08-07", "family" : "EPSON"},
    "cpe:/o:epson:ep-879ab_firmware" :
        {"versionEndExcluding" : "2017-06-12", "family" : "EPSON"},
    "cpe:/o:epson:ep-879aw_firmware" :
        {"versionEndExcluding" : "2017-06-12", "family" : "EPSON"},
    "cpe:/o:epson:ep-879ar_firmware" :
        {"versionEndExcluding" : "2017-06-12", "family" : "EPSON"},
    "cpe:/o:epson:ep-907f_firmware" :
        {"versionEndExcluding" : "2017-08-01", "family" : "EPSON"},
    "cpe:/o:epson:ep-977a3_firmware" :
        {"versionEndExcluding" : "2017-08-01", "family" : "EPSON"},
    "cpe:/o:epson:ep-978a3_firmware" :
        {"versionEndExcluding" : "2017-08-07", "family" : "EPSON"},
    "cpe:/o:epson:ep-979a3_firmware" :
        {"versionEndExcluding" : "2017-06-12", "family" : "EPSON"},
    "cpe:/o:epson:ep-m570t_firmware" :
        {"versionEndExcluding" : "2017-09-06", "family" : "EPSON"},
    "cpe:/o:epson:ew-m5071ft_firmware" :
        {"versionEndExcluding" : "2017-11-02", "family" : "EPSON"},
    "cpe:/o:epson:ew-m660ft_firmware" :
        {"versionEndExcluding" : "2018-04-19", "family" : "EPSON"},
    "cpe:/o:epson:ew-m770t_firmware" :
        {"versionEndExcluding" : "2017-09-06", "family" : "EPSON"},
    "cpe:/o:epson:pf-70_firmware" :
        {"versionEndExcluding" : "2018-04-20", "family" : "EPSON"},
    "cpe:/o:epson:pf-71_firmware" :
        {"versionEndExcluding" : "2017-07-18", "family" : "EPSON"},
    "cpe:/o:epson:pf-81_firmware" :
        {"versionEndExcluding" : "2017-09-14", "family" : "EPSON"},
    "cpe:/o:epson:px-048a_firmware" :
        {"versionEndExcluding" : "2017-07-04", "family" : "EPSON"},
    "cpe:/o:epson:px-049a_firmware" :
        {"versionEndExcluding" : "2017-09-11", "family" : "EPSON"},
    "cpe:/o:epson:px-437a_firmware" :
        {"versionEndExcluding" : "2017-07-24", "family" : "EPSON"},
    "cpe:/o:epson:px-m350f_firmware" :
        {"versionEndExcluding" : "2018-02-23", "family" : "EPSON"},
    "cpe:/o:epson:px-m5040f_firmware" :
        {"versionEndExcluding" : "2017-11-20", "family" : "EPSON"},
    "cpe:/o:epson:px-m5041f_firmware" :
        {"versionEndExcluding" : "2017-11-20", "family" : "EPSON"},
    "cpe:/o:epson:px-m650a_firmware" :
        {"versionEndExcluding" : "2017-10-17", "family" : "EPSON"},
    "cpe:/o:epson:px-m650f_firmware" :
        {"versionEndExcluding" : "2017-10-17", "family" : "EPSON"},
    "cpe:/o:epson:px-m680f_firmware" :
        {"versionEndExcluding" : "2017-06-29", "family" : "EPSON"},
    "cpe:/o:epson:px-m7050f_firmware" :
        {"versionEndExcluding" : "2017-10-13", "family" : "EPSON"},
    "cpe:/o:epson:px-m7050fp_firmware" :
        {"versionEndExcluding" : "2017-10-13", "family" : "EPSON"},
    "cpe:/o:epson:px-m7050fx_firmware" :
        {"versionEndExcluding" : "2017-11-07", "family" : "EPSON"},
    "cpe:/o:epson:px-m7070fx_firmware" :
        {"versionEndExcluding" : "2017-04-27", "family" : "EPSON"},
    "cpe:/o:epson:px-m740f_firmware" :
        {"versionEndExcluding" : "2017-06-29", "family" : "EPSON"},
    "cpe:/o:epson:px-m781f_firmware" :
        {"versionEndExcluding" : "2017-06-27", "family" : "EPSON"},
    "cpe:/o:epson:px-m840f_firmware" :
        {"versionEndExcluding" : "2017-11-16", "family" : "EPSON"},
    "cpe:/o:epson:px-m840fx_firmware" :
        {"versionEndExcluding" : "2017-12-08", "family" : "EPSON"},
    "cpe:/o:epson:px-m860f_firmware" :
        {"versionEndExcluding" : "2017-10-25", "family" : "EPSON"},
    "cpe:/o:epson:px-s05b_firmware" :
        {"versionEndExcluding" : "2018-03-09", "family" : "EPSON"},
    "cpe:/o:epson:px-s05w_firmware" :
        {"versionEndExcluding" : "2018-03-09", "family" : "EPSON"},
    "cpe:/o:epson:px-s350_firmware" :
        {"versionEndExcluding" : "2018-02-23", "family" : "EPSON"},
    "cpe:/o:epson:px-s5040_firmware" :
        {"versionEndExcluding" : "2017-11-20", "family" : "EPSON"},
    "cpe:/o:epson:px-s7050_firmware" :
        {"versionEndExcluding" : "2018-02-21", "family" : "EPSON"},
    "cpe:/o:epson:px-s7050ps_firmware" :
        {"versionEndExcluding" : "2018-02-21", "family" : "EPSON"},
    "cpe:/o:epson:px-s7050x_firmware" :
        {"versionEndExcluding" : "2017-11-07", "family" : "EPSON"},
    "cpe:/o:epson:px-s7070x_firmware" :
        {"versionEndExcluding" : "2017-04-27", "family" : "EPSON"},
    "cpe:/o:epson:px-s740_firmware" :
        {"versionEndExcluding" : "2017-12-03", "family" : "EPSON"},
    "cpe:/o:epson:px-s840_firmware" :
        {"versionEndExcluding" : "2017-11-16", "family" : "EPSON"},
    "cpe:/o:epson:px-s840x_firmware" :
        {"versionEndExcluding" : "2017-12-08", "family" : "EPSON"},
    "cpe:/o:epson:px-s860_firmware" :
        {"versionEndExcluding" : "2017-12-07", "family" : "EPSON"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_WARNING);