CVE-2020-6091

CVE-2020-6091 affects Epson EB-1470Ui via the ESPON Web Control feature. Affected: MAIN: 98009273ESWWV107 and MAIN2: 8X7325WWV303. A specially crafted sequence of HTTP requests can bypass authentication, leading to information disclosure. Multiple sources (Talos, Tenable OT plugin, Red Hat, CNVD,...

EPSON Epson EB-1470Ui Web Control Authentication Bypass Vulnerability

The EPSON EB-1470Ui is a full HD laser short-throw interactive projector from Epson Japan. A security vulnerability exists in the Epson Web Control feature in the Epson EB-1470Ui version 98009273ESWWV107 and version 8X7325WWV303. An attacker could exploit the vulnerability via a specially crafted...

PT-2020-18918 · Epson · Epson Eb-1470Ui Main +1

Name of the Vulnerable Software and Affected Versions: Epson EB-1470Ui MAIN version 98009273ESWWV107 Epson EB-1470Ui MAIN2 version 8X7325WWV303 Description: An exploitable authentication bypass issue exists in the ESPON Web Control functionality. A specially crafted series of HTTP requests can...

Vulnerability Spotlight: Authentication bypass vulnerability in some Epson projectors

Yuri Kramarz of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. The Epson EB-1470UI Projector contains an authentication bypass vulnerability in its web control functionality. This projector allows users to control it over the web. However, an adversary could trick a user into...

Epson EB-1470Ui ESPON Web Control Authentication Bypass Vulnerability

Summary An exploitable authentication bypass vulnerability exists in the ESPON Web Control functionality of Epson EB-1470Ui MAIN: 98009273ESWWV107 MAIN2: 8X7325WWV303. A specially crafted series of HTTP requests can cause authentication bypass resulting in information disclosure. An attacker can...

EPSON EasyMP Network Projection 2.81 - (EMP_NSWLSV) Unquoted Service Path Vulnerability

Exploit Title: EPSON EasyMP Network Projection 2.81 - 'EMPNSWLSV' Unquoted Service Path Discovery by: Roberto Piña Vendor Homepage: https://epson.com/support/easymp-network-projection-v2-86-for-windows Software Link :https://ftp.epson.com/drivers/epson16189.exe SEIKO EPSON CORP Tested Version: 2....

EPSON EasyMP Network Projection 2.81 - 'EMP_NSWLSV' Unquoted Service Path

Exploit Title: EPSON EasyMP Network Projection 2.81 - 'EMPNSWLSV' Unquoted Service Path Discovery by: Roberto Piña Discovery Date: 2020-02-13 Vendor Homepage: https://epson.com/support/easymp-network-projection-v2-86-for-windows Software Link :https://ftp.epson.com/drivers/epson16189.exe SEIKO...

EPSON EasyMP Network Projection 2.81 Unquoted Service Path

Exploit Title: EPSON EasyMP Network Projection 2.81 - 'EMPNSWLSV' Unquoted Service Path Discovery by: Roberto Piña Discovery Date: 2020-02-13 Vendor Homepage: https://epson.com/support/easymp-network-projection-v2-86-for-windows Software Link :https://ftp.epson.com/drivers/epson16189.exe SEIKO...

EPSON EasyMP Network Projection 2.81 - EMP_NSWLSV Unquoted Service Path

EPSON EasyMP Network Projection 2.81 - EMPNSWLSV Unquoted Service Path Exploit Title: EPSON EasyMP Network Projection 2.81 - 'EMPNSWLSV' Unquoted Service Path Discovery by: Roberto Piña Discovery Date: 2020-02-13 Vendor Homepage: https://epson.com/support/easymp-network-projection-v2-86-for-windo...

CVE-2018-0689

HTTP header injection vulnerability in SEIKO EPSON printers and scanners DS-570W firmware versions released prior to 2018 March 13, DS-780N firmware versions released prior to 2018 March 13, EP-10VA firmware versions released prior to 2017 September 4, EP-30VA firmware versions released prior to...

CVE-2018-0688

Open redirect vulnerability in SEIKO EPSON printers and scanners DS-570W firmware versions released prior to 2018 March 13, DS-780N firmware versions released prior to 2018 March 13, EP-10VA firmware versions released prior to 2017 September 4, EP-30VA firmware versions released prior to 2017 Jun...

CVE-2018-0689

HTTP header injection vulnerability in SEIKO EPSON printers and scanners DS-570W firmware versions released prior to 2018 March 13, DS-780N firmware versions released prior to 2018 March 13, EP-10VA firmware versions released prior to 2017 September 4, EP-30VA firmware versions released prior to...

CVE-2018-0688

Open redirect vulnerability in SEIKO EPSON printers and scanners DS-570W firmware versions released prior to 2018 March 13, DS-780N firmware versions released prior to 2018 March 13, EP-10VA firmware versions released prior to 2017 September 4, EP-30VA firmware versions released prior to 2017 Jun...

Design/Logic Flaw

HTTP header injection vulnerability in SEIKO EPSON printers and scanners DS-570W firmware versions released prior to 2018 March 13, DS-780N firmware versions released prior to 2018 March 13, EP-10VA firmware versions released prior to 2017 September 4, EP-30VA firmware versions released prior to...

Open redirect

Open redirect vulnerability in SEIKO EPSON printers and scanners DS-570W firmware versions released prior to 2018 March 13, DS-780N firmware versions released prior to 2018 March 13, EP-10VA firmware versions released prior to 2017 September 4, EP-30VA firmware versions released prior to 2017 Jun...

CVE-2018-0688

CVE-2018-0688 is an open-redirect vulnerability in the web interface of SEIKO EPSON printers and scanners. The issue allows remote attackers to redirect users to arbitrary websites, enabling phishing via the affected devices’ web interface. Affected product families include DS-570W, DS-780N, EP-1...

CVE-2018-0688

Open redirect vulnerability in SEIKO EPSON printers and scanners DS-570W firmware versions released prior to 2018 March 13, DS-780N firmware versions released prior to 2018 March 13, EP-10VA firmware versions released prior to 2017 September 4, EP-30VA firmware versions released prior to 2017 Jun...

CVE-2018-0689

HTTP header injection vulnerability in SEIKO EPSON printers and scanners DS-570W firmware versions released prior to 2018 March 13, DS-780N firmware versions released prior to 2018 March 13, EP-10VA firmware versions released prior to 2017 September 4, EP-30VA firmware versions released prior to...

CVE-2018-0689

CVE-2018-0689 is an HTTP header injection vulnerability in SEIKO EPSON printers and scanners. Affected devices include multiple EPSON models with firmware versions released before set dates (e.g., DS‑570W, DS‑780N, EP‑10VA, EP‑30VA, EP‑707A, and many others listed in the sources). The underlying ...

Epson WorkForce WF-2861 Firmware Update License Vulnerability

The Epson WorkForce WF-2861 is a Wi-Fi duplex MFP inkjet printer. A firmware update authorization vulnerability exists in the Web services of the Epson WorkForce WF-2861 10.48 LQ22I3 recovery mode, WF-2861 10.51.LQ20I6, and WF-2861 10.52.LQ17IA. A remote attacker can exploit this vulnerability to...