637 matches found
Epson iPrint Information Disclosure Vulnerability
EPSON iPrint application for Android is an Android-based remote printing application from Epson Japan. An information disclosure vulnerability exists in version 6.6.3 of the EPSON iPrint application for Android, which stems from the program's use of third-party components such as Box, Dropbox,...
EPSON WF-2750 HTML Injection Vulnerability
The EPSON WF-2750 is a printer device from the Japanese company Epson EPSON. An HTML injection vulnerability exists in the AirPrint Setup page of the web interface in EPSON WF-2750 printers using firmware version JP02I2, which originates when the printer web server fails to properly check the...
CVE-2018-14903
EPSON WF-2750 printers with firmware JP02I2 do not properly validate files before running updates, which allows remote attackers to cause a printer malfunction or send malicious data to the printer...
CVE-2018-14903
EPSON WF-2750 printers with firmware JP02I2 do not properly validate files before running updates, which allows remote attackers to cause a printer malfunction or send malicious data to the printer...
CVE-2018-14902
The ContentProvider in the EPSON iPrint application 6.6.3 for Android does not properly restrict data access. This allows an attacker's application to read scanned documents...
Code injection
The ContentProvider in the EPSON iPrint application 6.6.3 for Android does not properly restrict data access. This allows an attacker's application to read scanned documents...
Code injection
On EPSON WF-2750 printers with firmware JP02I2, there is no filtering of print jobs. Remote attackers can send print jobs directly to the printer via TCP port 9100...
CVE-2018-14899
On the EPSON WF-2750 printer with firmware JP02I2, the Web interface AirPrint Setup page is vulnerable to HTML Injection that can redirect users to malicious sites...
CVE-2018-14901
The EPSON iPrint application 6.6.3 for Android contains hard-coded API and Secret keys for the Dropbox, Box, Evernote and OneDrive services...
Hardcoded credentials
The EPSON iPrint application 6.6.3 for Android contains hard-coded API and Secret keys for the Dropbox, Box, Evernote and OneDrive services...
Design/Logic Flaw
On the EPSON WF-2750 printer with firmware JP02I2, the Web interface AirPrint Setup page is vulnerable to HTML Injection that can redirect users to malicious sites...
CVE-2018-14901
The EPSON iPrint application 6.6.3 for Android contains hard-coded API and Secret keys for the Dropbox, Box, Evernote and OneDrive services...
CVE-2018-14899
On the EPSON WF-2750 printer with firmware JP02I2, the Web interface AirPrint Setup page is vulnerable to HTML Injection that can redirect users to malicious sites...
CVE-2018-14902
The ContentProvider in the EPSON iPrint application 6.6.3 for Android does not properly restrict data access. This allows an attacker's application to read scanned documents...
Code injection
EPSON WF-2750 printers with firmware JP02I2 do not properly validate files before running updates, which allows remote attackers to cause a printer malfunction or send malicious data to the printer...
CVE-2018-14900
On EPSON WF-2750 printers with firmware JP02I2, there is no filtering of print jobs. Remote attackers can send print jobs directly to the printer via TCP port 9100...
CVE-2018-14900
On EPSON WF-2750 printers with firmware JP02I2, there is no filtering of print jobs. Remote attackers can send print jobs directly to the printer via TCP port 9100...
CVE-2018-14902
The ContentProvider in the EPSON iPrint application 6.6.3 for Android does not properly restrict data access. This allows an attacker's application to read scanned documents...
CVE-2018-14900
CVE-2018-14900 affects EPSON WF-2750 printers with firmware JP02I2, where print jobs are not filtered; remote attackers can submit bypassing filters to the printer over TCP port 9100. The vulnerability is described in both NVD and a Nessus plugin, which cite the same issue: unauthenticated, netwo...
CVE-2018-14902
CVE-2018-14902 affects the EPSON iPrint Android app (version 6.6.3). The ContentProvider does not properly restrict data access, allowing a non-privileged attacker’s app to read scanned documents and thus compromising data confidentiality . The NVD metrics show a base score of 5.0 (CVSSv2) and 7....