Vulnerabilidades de SEIKO EPSON CORPORATION
CVEs publicadas que afetam produtos de SEIKO EPSON CORPORATION: 7 registro(s), com severidade, exploração e correções.
Web Config 2Epson Stylus SX510W 1EPSON WebConfig for SEIKO EPSON Projector Products 1Epson Web Control for SEIKO EPSON Projector Products 1ESC/POS 1Status Monitor 3 1Multiple SEIKO EPSON printers and scanners 1
CVE-2026-73542
Baixa · 3.7
CWE-296 20/08/2026
Multiple SEIKO EPSON printers and scanners contain revoked root certificates. A…
Multiple SEIKO EPSON printers and scanners contain revoked root certificates. A man-in-the-middle attack may allow an attacker to obtain communication data transmitted by the product. As for the details of the affected products and versions, refer to the vendor's information.
CVE-2026-58315
Média · 4.3
CWE-352 07/07/2026
Cross-Site Request Forgery (CSRF) em SEIKO EPSON CORPORATION Web Config
Cross-site request forgery vulnerability exists in SEIKO EPSON Web Config. If a user views a malicious page while logged into Web Config, unintended operations may be performed.
CVE-2026-23767
Crítica · 9.8
CWE-306 05/03/2026
Missing Authentication for Critical Function em Epson Sb-h50 Firmware
ESC/POS, a printer control language designed by Seiko Epson Corporation, lacks mechanisms for user authentication and command authorization, does not provide controls to restrict sources or destinations of network communication, and transmits commands without encryption or integrity protection.
CVE-2020-36975
Alta · 7.8
CWE-428 27/01/2026
EPSON Status Monitor 3 'EPSON_PM_RPCV4_06' - Unquoted Service Path
EPSON Status Monitor 3 version 8.0 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code by exploiting the service binary path. Attackers can leverage the unquoted path in 'C:\Program Files\Common Files\EPSON\EPW!3SSRP\E_S60RPB.EXE' to inject malicious executables and escalate privileges.
CVE-2025-66635
Alta · 7.2
CWE-121 16/12/2025
Stack-based Buffer Overflow em SEIKO EPSON CORPORATION Web Config
Stack-based buffer overflow vulnerability exists in SEIKO EPSON Web Config. Specially crafted data input by a logged-in user may execute arbitrary code. As for the details of the affected products and versions, see the information provided by the vendor under [References].
CVE-2025-64310
Crítica · 9.8
CWE-307 21/11/2025
Improper Restriction of Excessive Authentication Attempts em SEIKO EPSON CORPORATION EPSON WebConfig for SEIKO EPSON Projector Products
EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts. An administrative user's password may be identified through a brute force attack.
CVE-2023-7326
Alta · 8.7
CWE-400 12/11/2025
Epson Stylus SX510W Printer Remote Power Off DoS
The Epson Stylus SX510W embedded web management service fails to properly handle consecutive ampersand characters in query parameters when accessing /PRESENTATION/HTML/TOP/INDEX.HTML. A remote attacker can send a malformed request that triggers improper input parsing or memory handling, resulting in the printer process shutting down or powering off, causing a denial of service condition.