EPSON WF-2861 Uncontrolled Resource Consumption (CVE-2018-18960)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(505067);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/04/21");

  script_cve_id("CVE-2018-18960");

  script_name(english:"EPSON WF-2861 Uncontrolled Resource Consumption (CVE-2018-18960)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"An issue was discovered on Epson WorkForce WF-2861 10.48 LQ22I3,
10.51.LQ20I6 and 10.52.LQ17IA devices. They use SNMP to find certain
devices on the network, but the default version is v2c, allowing an
amplification attack.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
# https://github.com/epistemophilia/CVEs/blob/master/Epson-WorkForce-WF2861/CVE-2018-18960/poc-cve-2018-18960.py
# script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?e86b5de8");
  script_set_attribute(attribute:"solution", value:
"Refer to the vendor advisory.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2018-18960");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");
  script_cwe_id(400);

  script_set_attribute(attribute:"vuln_publication_date", value:"2018/12/24");
  script_set_attribute(attribute:"patch_publication_date", value:"2018/12/24");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/02/05");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:epson_workforce_wf-2861_firmware:10.48_lq22i3");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:epson_workforce_wf-2861_firmware:10.51.lq20i6");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:epson:epson_workforce_wf-2861_firmware:10.52.lq17ia");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/EPSON");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/EPSON');

var asset = tenable_ot::assets::get(vendor:'EPSON');

var vuln_cpes = {
    "cpe:/o:epson:epson_workforce_wf-2861_firmware:10.48_lq22i3" :
        {"versionEndIncluding" : "10.48_lq22i3", "versionStartIncluding" : "10.48_lq22i3", "family" : "EPSON"},
    "cpe:/o:epson:epson_workforce_wf-2861_firmware:10.51.lq20i6" :
        {"versionEndIncluding" : "10.51.lq20i6", "versionStartIncluding" : "10.51.lq20i6", "family" : "EPSON"},
    "cpe:/o:epson:epson_workforce_wf-2861_firmware:10.52.lq17ia" :
        {"versionEndIncluding" : "10.52.lq17ia", "versionStartIncluding" : "10.52.lq17ia", "family" : "EPSON"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_WARNING);