637 matches found
Cross site scripting
Cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script. Note Web Config is the software that allows users to check the status and change the settings of SEIKO EPS...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote unauthenticated attacker to hijack the authentication and perform unintended operations by having a logged-in user view a malicious page. Note Web Config is the software that allows...
CVE-2023-23572
Cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script. Note Web Config is the software that allows users to check the status and change the settings of SEIKO EPS...
CVE-2023-27520
Cross-site request forgery CSRF vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote unauthenticated attacker to hijack the authentication and perform unintended operations by having a logged-in user view a malicious page. Note Web Config is the software that allows...
PT-2023-21190 · Seiko Epson · Seiko Epson Printers/Network Interface Web Config
Name of the Vulnerable Software and Affected Versions: SEIKO EPSON printers/network interface Web Config affected versions not specified Description: A cross-site request forgery CSRF issue allows a remote unauthenticated attacker to hijack the authentication and perform unintended operations by...
CVE-2023-27520
The CVE-2023-27520 CSRF vulnerability affects SEIKO EPSON printers’ Web Config (Remote Manager) and can allow a remote unauthenticated attacker to hijack a user’s session by tricksing a logged-in user into visiting a malicious page. The underlying issue is cross-site request forgery in the Web Co...
CVE-2023-27520: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote unauthenticated attacker to hijack the authentication and perform unintended operations by having a logged-in user view a malicious page. Note Web Config is the software that allows...
CVE-2023-23572: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script. Note Web Config is the software that allows users to check the status and change the settings of SEIKO EPS...
PT-2023-19051 · Seiko Epson · Seiko Epson Printers/Network Interface Web Config
Name of the Vulnerable Software and Affected Versions: SEIKO EPSON printers/network interface Web Config affected versions not specified Description: A cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated attacker with administrativ...
CVE-2023-27520
Cross-site request forgery CSRF vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote unauthenticated attacker to hijack the authentication and perform unintended operations by having a logged-in user view a malicious page. Note Web Config is the software that allows...
Epson printer 跨站脚本漏洞
Epson printer is a printer from the Japanese company Epson. A cross-site scripting vulnerability exists in Epson printer. An attacker can exploit this vulnerability to inject arbitrary script...
CVE-2023-23572
CVE-2023-23572 is a stored cross-site scripting vulnerability in SEIKO EPSON printers’ and network interface Web Config (Remote Manager) affecting the Web Config component pre-installed on some printers/network interfaces. A remote authenticated attacker with administrative privileges can inject ...
Epson printer 跨站请求伪造漏洞
Epson printer is a printer from the Japanese company Epson. A cross-site request forgery vulnerability exists in Epson printer. An attacker could use this vulnerability to hijack authentication and perform unintended actions by allowing a logged in user to view a malicious page...
CVE-2023-23572
Cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script. Note Web Config is the software that allows users to check the status and change the settings of SEIKO EPS...
JVN#82424996: Multiple vulnerabilities in SEIKO EPSON printers/network interface Web Config
Web Config for printers/network interface provided by SEIKO EPSON CORPORATION contains multiple vulnerabilities listed below. Stored cross-site Scripting CWE-79 - CVE-2023-23572 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N| Base Score: 4.8 CVSS v2|...
SUSE CVE-2020-12867
A NULL pointer dereference in saneiepsonnetread in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, aka GHSL-2020-075...
Unspecified Vulnerability in Epson TM-C3500 and TM-C7500
The Epson TM-C3500 and Epson TM-C7500 are both printers from the Japanese company Epson. A security vulnerability exists in Epson TM-C3500 and TM-C7500 firmware version WAM31500, which can be exploited by an attacker to bypass authentication...
CVE-2022-36133
The WebConfig functionality of Epson TM-C3500 and TM-C7500 devices with firmware version WAM31500 allows authentication bypass...
