Vulnerability · Published Apr 11, 2023 · Assigned by jpcert
CVE-2023-23572
Medium 4.8
In plain English
A medium-severity cross-site scripting in SEIKO EPSON printers/network interface Web Config from SEIKO EPSON CORPORATION. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities).
Official description
Cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script. [Note] Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers/network interface via a web browser. According to SEIKO EPSON CORPORATION, it is also called as Remote Manager in some products. Web Config is pre-installed in some printers/network interface provided by SEIKO EPSON CORPORATION. For the details of the affected product names/model numbers, refer to the information provided by the vendor.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SEIKO EPSON CORPORATION | SEIKO EPSON printers/network interface Web Config | unspecified |
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N