CVE-2019-20458: Incorrect Default Permissions

An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. By default, the device comes and functions without a password. The user is at no point prompted to set up a password on the device leaving a number of devices without a password. In this case, anyone connecting to the we...

PT-2024-10773 · Epson · Epson

Name of the Vulnerable Software and Affected Versions: Siime Eye version 14.1.00000001.3.330.0.0.3.14 Description: An issue was discovered in the software, where there is no CSRF protection. This issue affects multiple products, including Epson, Sannce, Svakom, and Tk-star. However, specific...

CVE-2019-20459

An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. With the SNMPv1 public community, all values can be read, and with the epson community, all the changeable values can be written/updated, as demonstrated by permanently disabling the network card or changing the DNS...

CVE-2019-20459: Undefined Security Weakness

An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. With the SNMPv1 public community, all values can be read, and with the epson community, all the changeable values can be written/updated, as demonstrated by permanently disabling the network card or changing the DNS...

PT-2024-10774 · Epson +1 · Epson Products +1

Name of the Vulnerable Software and Affected Versions: Lush 2 versions through 2020-02-25 Tk-star nan versions affected versions not specified Epson products versions affected versions not specified One2Track versions affected versions not specified Brother printers versions affected versions not...

CVE-2019-20458

The Epson Expression Home XP255 (version 20.08.FM10I8 ) is vulnerable to an issue where the device functions without a password by default. Because users are not prompted to set up a password, any individual who connects to the web admin panel can gain administrator privileges without any credent...

PT-2024-10735 · Epson · Epson Expression Home Xp255

Name of the Vulnerable Software and Affected Versions: Epson Expression Home XP255 version 20.08.FM10I8 Description: An issue was discovered that allows all values to be read with the SNMPv1 public community, and with the epson community, all the changeable values can be written/updated. This can...

Epson Express Home XP255 安全漏洞

The Epson Express Home XP255 is a printer from the Japanese company Epson Epson. A security vulnerability exists in the Epson Express Home XP255 version 20.08, which stems from lax management of access rights to the public community for SNMPv1 and the epson community, which allows unauthorized...

CVE-2019-20460: Cross-Site Request Forgery (CSRF)

An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. POST requests don't require anti-CSRF tokens or other mechanisms for validating that the request is from a legitimate source. In addition, CSRF attacks can be used to send text directly to the RAW printer interface. For...

CVE-2019-20460

An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. POST requests don't require anti-CSRF tokens or other mechanisms for validating that the request is from a legitimate source. In addition, CSRF attacks can be used to send text directly to the RAW printer interface. For...

CVE-2019-20460

The Epson Expression Home XP255 (version 20.08.FM10I8 ) is vulnerable to a Cross-Site Request Forgery (CSRF) attack because POST requests lack mandatory (anti-)CSRF tokens or similar validation mechanisms. This flaw allows an attacker to send text directly to the RAW printer interface , potential...

Insecure initial password configuration issue in SEIKO EPSON Web Config

Overview Web Config is software that allows users to check the status and change the settings of SEIKO EPSON products, e.g., printers and scanners, via a web browser. In the initial setting no administrative password is set, and when a user connects the device and configures Web Config settings f...

CVE-2024-47295

Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote unauthenticated attacker to set an arbitrary password and operate the device with an administrative privilege. As for the details of the affected versions, see the information provided by the vendor under...

CVE-2024-47295

Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote unauthenticated attacker to set an arbitrary password and operate the device with an administrative privilege. As for the details of the affected versions, see the information provided by the vendor under...

CVE-2024-47295

Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote unauthenticated attacker to set an arbitrary password and operate the device with an administrative privilege. As for the details of the affected versions, see the information provided by the vendor under...

CVE-2024-47295

CVE-2024-47295 affects SEIKO EPSON Web Config, where insecure initial password configuration allows a remote unauthenticated attacker to set an arbitrary password and operate the device with administrative privileges. Public sources describe the vulnerability in the Web Config software used by SE...

CVE-2024-47295: Initialization of a Resource with an Insecure Default

Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote unauthenticated attacker to set an arbitrary password and operate the device with an administrative privilege. As for the details of the affected versions, see the information provided by the vendor under...

PT-2024-32506 · Seiko Epson · Seiko Epson Web Config

Name of the Vulnerable Software and Affected Versions: SEIKO EPSON Web Config affected versions not specified Description: The issue is related to an insecure initial password configuration in SEIKO EPSON Web Config, allowing a remote unauthenticated attacker to set an arbitrary password and...

SEIKO EPSON Web Config 安全漏洞

SEIKO EPSON Web Config is a web configuration page from SEIKO Japan. A security vulnerability exists in SEIKO EPSON Web Config that stems from an insecure initial password configuration...

Epson Express Home XP255 安全漏洞

The Epson Express Home XP255 is a printer from the Japanese company Epson Epson. The Epson Express Home XP255 has a security vulnerability that originates from the fact that anyone connecting to the Web administration panel can become an administrator without using any credentials...