Vulnerability · Published Aug 2, 2023 · Assigned by jpcert

CVE-2023-38556

High 7.5

In plain English

A high-severity security flaw in SEIKO EPSON printer Web Config from SEIKO EPSON CORPORATION. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 58% of all known vulnerabilities).

Severity (CVSS NVD)7.5High

Exploit odds (30 days)0.9%top 41.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Improper input validation vulnerability in SEIKO EPSON printer Web Config allows a remote attacker to turned off the printer. [Note] Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers via a web browser. Web Config is pre-installed in some printers provided by SEIKO EPSON CORPORATION. For the details of the affected product names/model numbers, refer to the information provided by the vendor.

Affected products (as reported)

Vendor	Product	Versions
SEIKO EPSON CORPORATION	SEIKO EPSON printer Web Config	unspecified

In plain English

Official description

Affected products (as reported)

References