critical9.8
CVE-2020-28929
Unrestricted access to the log downloader functionality in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to remotely retrieve administrat…
Impact
Unrestricted access to the log downloader functionality in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to remotely retrieve administrative hashed credentials via the maintenance/troubleshoot.php?download=1 URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Epson | Eps Tse Server 8 Firmware | Version 21.0.11 |