CVE-2018-19248

The CVE affects Epson WorkForce WF-2861 devices (versions 10.48 LQ22I3 Recovery-mode, 10.51.LQ20I6, 10.52.LQ17IA) where a missing-authentication flaw in the web service allows remote attackers to upload a firmware file and reset the printer. Attack requires requests to /DOWN/FIRMWAREUPDATE/ROM1 a...

Bad Code Library Triggers Devil's Ivy Vulnerability in Millions of IoT Devices

Tens of millions of products ranging from airport surveillance cameras, sensors, networking equipment and IoT devices are vulnerable to a flaw that allows attackers to remotely gain control over devices or crash them. The vulnerability, dubbed Devil’s Ivy, was identified by ​researchers at Senrio...