high7.5
CVE-2023-38556
Improper input validation vulnerability in SEIKO EPSON printer Web Config allows a remote attacker to turned off the printer.
Impact
Improper input validation vulnerability in SEIKO EPSON printer Web Config allows a remote attacker to turned off the printer. [Note] Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers via a web browser. Web Config is pre-installed in some printers provided by SEIKO EPSON CORPORATION. For the details of the affected product names/model numbers, refer to the information provided by the vendor.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Epson | Ep-801a Firmware | All versions |
| Epson | Ep-802a Firmware | All versions |
| Epson | Ep-901a Firmware | All versions |
| Epson | Ep-901f Firmware | All versions |
| Epson | Ep-902a Firmware | All versions |
| Epson | Pa-Tcu1 Firmware | All versions |
| Epson | Pm-T960 Firmware | All versions |
| Epson | Pm-T990 Firmware | All versions |
| Epson | Px-201 Firmware | All versions |
| Epson | Px-502a Firmware | All versions |
| Epson | Px-601f Firmware | All versions |
| Epson | Px-602f Firmware | All versions |