CVE-2018-14903

CVE-2018-14903 affects EPSON WF-2750 printers with firmware JP02I2. The update process does not properly validate files before running updates, enabling a remote attacker to cause a printer malfunction or deliver malicious data. The connected Nessus plugin reiterates the same origin-validation is...

CVE-2018-14902

CVE-2018-14902 affects the EPSON iPrint Android app (version 6.6.3). The ContentProvider does not properly restrict data access, allowing a non-privileged attacker’s app to read scanned documents and thus compromising data confidentiality . The NVD metrics show a base score of 5.0 (CVSSv2) and 7....

CVE-2018-14903

EPSON WF-2750 printers with firmware JP02I2 do not properly validate files before running updates, which allows remote attackers to cause a printer malfunction or send malicious data to the printer...

CVE-2018-14901

The CVE-2018-14901 entry affects Epson iPrint for Android (version 6.6.3). The vulnerability arises from hard-coded API and secret keys for third‑party services (Dropbox, Box, Evernote, OneDrive) stored in the app, as described in CNVD-2018-17427. This leads to potential information disclosure an...

CVE-2018-14901

The EPSON iPrint application 6.6.3 for Android contains hard-coded API and Secret keys for the Dropbox, Box, Evernote and OneDrive services...

CVE-2018-14900

On EPSON WF-2750 printers with firmware JP02I2, there is no filtering of print jobs. Remote attackers can send print jobs directly to the printer via TCP port 9100...

CVE-2018-14899

On the EPSON WF-2750 printer with firmware JP02I2, the Web interface AirPrint Setup page is vulnerable to HTML Injection that can redirect users to malicious sites...

CVE-2018-14902: Exposure of Sensitive Information to an Unauthorized Actor

The ContentProvider in the EPSON iPrint application 6.6.3 for Android does not properly restrict data access. This allows an attacker's application to read scanned documents...

CVE-2018-14900: Undefined Security Weakness

On EPSON WF-2750 printers with firmware JP02I2, there is no filtering of print jobs. Remote attackers can send print jobs directly to the printer via TCP port 9100...

PT-2018-12785

Name of the Vulnerable Software and Affected Versions EPSON WF-2750 version JP02I2 Description The issue concerns the lack of filtering of print jobs on the affected printer. Remote attackers can exploit this by sending print jobs directly to the printer via TCP port 9100. Recommendations For EPS...

PT-2018-12788

Name of the Vulnerable Software and Affected Versions EPSON WF-2750 version JP02I2 Description The issue concerns the improper validation of files before running updates, allowing remote attackers to cause a malfunction or send malicious data to the printer. Recommendations For EPSON WF-2750...

PT-2018-12787

Name of the Vulnerable Software and Affected Versions EPSON iPrint application version 6.6.3 Description The issue concerns improper data access restriction in the ContentProvider of the EPSON iPrint application. This allows an attacker's application to read scanned documents. Recommendations For...

CVE-2018-14903: Origin Validation Error

EPSON WF-2750 printers with firmware JP02I2 do not properly validate files before running updates, which allows remote attackers to cause a printer malfunction or send malicious data to the printer...

PT-2018-12786

Name of the Vulnerable Software and Affected Versions EPSON iPrint application version 6.6.3 Description The issue concerns the presence of hard-coded API and Secret keys for various cloud services, including Dropbox, Box, Evernote, and OneDrive, within the application. This could potentially...

CVE-2018-14901: Use of Hard-coded Credentials

The EPSON iPrint application 6.6.3 for Android contains hard-coded API and Secret keys for the Dropbox, Box, Evernote and OneDrive services...

PT-2018-12784

Name of the Vulnerable Software and Affected Versions EPSON WF-2750 version JP02I2 Description The Web interface AirPrint Setup page is susceptible to HTML Injection, which can redirect users to malicious sites. Recommendations For EPSON WF-2750 version JP02I2, consider disabling the AirPrint Set...

CVE-2018-14899: Improper Neutralization of Input During Web Page Generation

On the EPSON WF-2750 printer with firmware JP02I2, the Web interface AirPrint Setup page is vulnerable to HTML Injection that can redirect users to malicious sites...

epson.com.tr XSS vulnerability

Open Bug Bounty ID: OBB-665257 Description| Value ---|--- Affected Website:| epson.com.tr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

epson.ch XSS vulnerability

Open Bug Bounty ID: OBB-665256 Description| Value ---|--- Affected Website:| epson.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

epson.co.za XSS vulnerability

Open Bug Bounty ID: OBB-665254 Description| Value ---|--- Affected Website:| epson.co.za Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...