Vulnerability Details : CVE-2023-38556
Improper input validation vulnerability in SEIKO EPSON printer Web Config allows a remote attacker to turned off the printer.
[Note] Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers via a web browser. Web Config is pre-installed in some printers provided by SEIKO EPSON CORPORATION. For the details of the affected product names/model numbers, refer to the information provided by the vendor.
Products affected by CVE-2023-38556
- cpe:2.3:o:epson:ep-801a_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:epson:ep-802a_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:epson:ep-901a_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:epson:ep-901f_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:epson:ep-902a_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:epson:pa-tcu1_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:epson:pm-t960_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:epson:pm-t990_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:epson:px-201_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:epson:px-502a_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:epson:px-601f_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:epson:px-602f_firmware:-:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2023-38556
0.17%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 54 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2023-38556
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
3.9
|
3.6
|
NIST |
References for CVE-2023-38556
-
https://www.epson.jp/support/misc_t/230802_oshirase.htm
プリンター製品のWeb Configにおける脆弱性について｜サポート&ダウンロード｜エプソンVendor Advisory
-
https://jvn.jp/en/jp/JVN61337171/
JVN#61337171: SEIKO EPSON printer Web Config vulnerable to denial-of-service (DoS)Third Party Advisory
Jump to