549 matches found
CVE-2018-14902
The ContentProvider in the EPSON iPrint application 6.6.3 for Android does not properly restrict data access. This allows an attacker's application to read scanned documents...
CVE-2018-14901
The EPSON iPrint application 6.6.3 for Android contains hard-coded API and Secret keys for the Dropbox, Box, Evernote and OneDrive services...
Hardcoded credentials
The EPSON iPrint application 6.6.3 for Android contains hard-coded API and Secret keys for the Dropbox, Box, Evernote and OneDrive services...
CVE-2018-14899
On the EPSON WF-2750 printer with firmware JP02I2, the Web interface AirPrint Setup page is vulnerable to HTML Injection that can redirect users to malicious sites...
CVE-2018-14902
The ContentProvider in the EPSON iPrint application 6.6.3 for Android does not properly restrict data access. This allows an attacker's application to read scanned documents...
Code injection
On EPSON WF-2750 printers with firmware JP02I2, there is no filtering of print jobs. Remote attackers can send print jobs directly to the printer via TCP port 9100...
CVE-2018-14899
On the EPSON WF-2750 printer with firmware JP02I2, the Web interface AirPrint Setup page is vulnerable to HTML Injection that can redirect users to malicious sites...
CVE-2018-14900
On EPSON WF-2750 printers with firmware JP02I2, there is no filtering of print jobs. Remote attackers can send print jobs directly to the printer via TCP port 9100...
CVE-2018-14900
On EPSON WF-2750 printers with firmware JP02I2, there is no filtering of print jobs. Remote attackers can send print jobs directly to the printer via TCP port 9100...
Code injection
The ContentProvider in the EPSON iPrint application 6.6.3 for Android does not properly restrict data access. This allows an attacker's application to read scanned documents...
Design/Logic Flaw
On the EPSON WF-2750 printer with firmware JP02I2, the Web interface AirPrint Setup page is vulnerable to HTML Injection that can redirect users to malicious sites...
CVE-2018-14901
The EPSON iPrint application 6.6.3 for Android contains hard-coded API and Secret keys for the Dropbox, Box, Evernote and OneDrive services...
CVE-2018-14903
CVE-2018-14903 affects EPSON WF-2750 printers with firmware JP02I2. The update process does not properly validate files before running updates, enabling a remote attacker to cause a printer malfunction or deliver malicious data. The connected Nessus plugin reiterates the same origin-validation is...
CVE-2018-14902
The ContentProvider in the EPSON iPrint application 6.6.3 for Android does not properly restrict data access. This allows an attacker's application to read scanned documents...
CVE-2018-14901
The CVE-2018-14901 entry affects Epson iPrint for Android (version 6.6.3). The vulnerability arises from hard-coded API and secret keys for third‑party services (Dropbox, Box, Evernote, OneDrive) stored in the app, as described in CNVD-2018-17427. This leads to potential information disclosure an...
CVE-2018-14900
CVE-2018-14900 affects EPSON WF-2750 printers with firmware JP02I2, where print jobs are not filtered; remote attackers can submit bypassing filters to the printer over TCP port 9100. The vulnerability is described in both NVD and a Nessus plugin, which cite the same issue: unauthenticated, netwo...
CVE-2018-14900
On EPSON WF-2750 printers with firmware JP02I2, there is no filtering of print jobs. Remote attackers can send print jobs directly to the printer via TCP port 9100...
CVE-2018-14899
CVE-2018-14899 affects the EPSON WF-2750 printer with firmware JP02I2. The Web interface AirPrint Setup page is vulnerable to HTML injection, enabling redirection of users to malicious sites. Multiple connected sources (NVD entry, CNVD, CNVD-style EUVD/NASL references, and Nessus/OT plugin contex...
CVE-2018-14899
On the EPSON WF-2750 printer with firmware JP02I2, the Web interface AirPrint Setup page is vulnerable to HTML Injection that can redirect users to malicious sites...
CVE-2018-14903
EPSON WF-2750 printers with firmware JP02I2 do not properly validate files before running updates, which allows remote attackers to cause a printer malfunction or send malicious data to the printer...