SEIKO EPSON CORPORATION vulnerabilities
Published CVEs affecting SEIKO EPSON CORPORATION products: 7 record(s), with severity, exploitation and fixes.
Web Config 2Epson Stylus SX510W 1EPSON WebConfig for SEIKO EPSON Projector Products 1Epson Web Control for SEIKO EPSON Projector Products 1ESC/POS 1Status Monitor 3 1Multiple SEIKO EPSON printers and scanners 1
CVE-2026-73542
Low · 3.7
CWE-296 Aug 20, 2026
Multiple SEIKO EPSON printers and scanners contain revoked root certificates. A…
Multiple SEIKO EPSON printers and scanners contain revoked root certificates. A man-in-the-middle attack may allow an attacker to obtain communication data transmitted by the product. As for the details of the affected products and versions, refer to the vendor's information.
CVE-2026-58315
Medium · 4.3
CWE-352 Jul 7, 2026
Cross-Site Request Forgery (CSRF) in SEIKO EPSON CORPORATION Web Config
Cross-site request forgery vulnerability exists in SEIKO EPSON Web Config. If a user views a malicious page while logged into Web Config, unintended operations may be performed.
CVE-2026-23767
Critical · 9.8
CWE-306 Mar 5, 2026
Missing Authentication for Critical Function in Epson Sb-h50 Firmware
ESC/POS, a printer control language designed by Seiko Epson Corporation, lacks mechanisms for user authentication and command authorization, does not provide controls to restrict sources or destinations of network communication, and transmits commands without encryption or integrity protection.
CVE-2020-36975
High · 7.8
CWE-428 Jan 27, 2026
EPSON Status Monitor 3 'EPSON_PM_RPCV4_06' - Unquoted Service Path
EPSON Status Monitor 3 version 8.0 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code by exploiting the service binary path. Attackers can leverage the unquoted path in 'C:\Program Files\Common Files\EPSON\EPW!3SSRP\E_S60RPB.EXE' to inject malicious executables and escalate privileges.
CVE-2025-66635
High · 7.2
CWE-121 Dec 16, 2025
Stack-based Buffer Overflow in SEIKO EPSON CORPORATION Web Config
Stack-based buffer overflow vulnerability exists in SEIKO EPSON Web Config. Specially crafted data input by a logged-in user may execute arbitrary code. As for the details of the affected products and versions, see the information provided by the vendor under [References].
CVE-2025-64310
Critical · 9.8
CWE-307 Nov 21, 2025
EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products do not restrict...
EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts. An administrative user's password may be identified through a brute force attack.
CVE-2023-7326
High · 8.7
CWE-400 Nov 12, 2025
Epson Stylus SX510W Printer Remote Power Off DoS
The Epson Stylus SX510W embedded web management service fails to properly handle consecutive ampersand characters in query parameters when accessing /PRESENTATION/HTML/TOP/INDEX.HTML. A remote attacker can send a malformed request that triggers improper input parsing or memory handling, resulting in the printer process shutting down or powering off, causing a denial of service condition.