Skip to content
Noroxi

Epson records

34 published records for vendor epson.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
2.9%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

34 records
  • CVE-2017-12860
    40Plan

    The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using a

    CriticalCVSS 9.8No exploitEPSS 3%

    epson · easympOct 10, 2017

  • CVE-2017-12861
    40Plan

    The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using a

    CriticalCVSS 9.8No exploitEPSS 3%

    epson · easympOct 10, 2017

  • CVE-2020-28929
    39Monitor

    Unrestricted access to the log downloader functionality in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to remotely r

    CriticalCVSS 9.8No exploitEPSS 1%

    epson · eps tse server 8 firmwareDec 16, 2020

  • CVE-2026-23767
    39Monitor

    ESC/POS, a printer control language designed by Seiko Epson Corporation, lacks mechanisms for user authentication and command authorization,

    CriticalCVSS 9.8No exploitEPSS 0%

    epson · sb-h50 firmwareMar 5, 2026

  • CVE-2020-6091
    37Monitor

    An exploitable authentication bypass vulnerability exists in the ESPON Web Control functionality of Epson EB-1470Ui MAIN: 98009273ESWWV107 M

    CriticalCVSS 9.1No exploitEPSS 2%

    epson · eb-1470ui firmwareMay 22, 2020

  • CVE-2018-19248
    36Monitor

    The web service on Epson WorkForce WF-2861 10.48 LQ22I3(Recovery-mode), WF-2861 10.51.LQ20I6, and WF-2861 10.52.LQ17IA devices allows remote

    CriticalCVSS 9.1No exploitEPSS 1%

    epson · epson workforce wf-2861 firmwareDec 24, 2018

  • CVE-2022-36133
    36Monitor

    The WebConfig functionality of Epson TM-C3500 and TM-C7500 devices with firmware version WAM31500 allows authentication bypass.

    CriticalCVSS 9.1No exploitEPSS 1%

    epson · tm-c3500 firmwareNov 25, 2022

  • CVE-2018-5550
    35Monitor

    Versions of Epson AirPrint released prior to January 19, 2018 contain a reflective cross-site scripting (XSS) vulnerability, which can allow

    MediumCVSS 6.1No exploitEPSS 37%

    epson · airprintFeb 8, 2018

  • CVE-2020-12695
    35Monitor

    The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delive

    HighCVSS 7.5Proof of conceptEPSS 15%

    nec · wr8165nJun 8, 2020

  • CVE-2018-0689
    35Monitor

    HTTP header injection vulnerability in SEIKO EPSON printers and scanners (DS-570W firmware versions released prior to 2018 March 13, DS-780N

    HighCVSS 8.8No exploitEPSS 2%

    epson · ds-570w firmwareJan 9, 2019

  • CVE-2020-28931
    35Monitor

    Lack of an anti-CSRF token in the entire administrative interface in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to

    HighCVSS 8.8No exploitEPSS 1%

    epson · eps tse server 8 firmwareDec 16, 2020

  • CVE-2019-20458
    35Monitor

    An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices.

    HighCVSS 8.8No exploitEPSS 0%

    Nov 7, 2024

  • CVE-2019-20460
    35Monitor

    An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices.

    HighCVSS 8.8No exploitEPSS 0%

    Nov 7, 2024

  • CVE-2019-20459
    33Monitor

    An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices.

    HighCVSS 8.4No exploitEPSS 0%

    Nov 7, 2024

  • CVE-2020-5681
    31Monitor

    Untrusted search path vulnerability in self-extracting files created by EpsonNet SetupManager versions 2.2.14 and earlier, and Offirio Syner

    HighCVSS 7.8No exploitEPSS 1%

    epson · epsonnet setupmanagerDec 23, 2020

  • CVE-2020-5674
    31Monitor

    Untrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an attacker to gain privileges via a Trojan ho

    HighCVSS 7.8No exploitEPSS 0%

    epson · album printNov 24, 2020

  • CVE-2018-19232
    30Monitor

    The web service on Epson WorkForce WF-2861 10.48 LQ22I3(Recovery-mode), WF-2861 10.51.LQ20I6, and WF-2861 10.52.LQ17IA devices allows remote

    HighCVSS 7.5No exploitEPSS 1%

    epson · epson workforce wf-2861 firmwareDec 24, 2018

  • CVE-2018-14902
    30Monitor

    The ContentProvider in the EPSON iPrint application 6.6.3 for Android does not properly restrict data access.

    HighCVSS 7.5No exploitEPSS 1%

    epson · iprintAug 30, 2018

  • CVE-2018-18959
    30Monitor

    An issue was discovered on Epson WorkForce WF-2861 10.48 LQ22I3, 10.51.LQ20I6 and 10.52.LQ17IA devices.

    HighCVSS 7.5No exploitEPSS 1%

    epson · epson workforce wf-2861 firmwareDec 24, 2018

  • CVE-2018-14901
    30Monitor

    The EPSON iPrint application 6.6.3 for Android contains hard-coded API and Secret keys for the Dropbox, Box, Evernote and OneDrive services.

    HighCVSS 7.5No exploitEPSS 1%

    epson · iprintAug 30, 2018

  • CVE-2018-14900
    30Monitor

    On EPSON WF-2750 printers with firmware JP02I2, there is no filtering of print jobs.

    HighCVSS 7.5No exploitEPSS 1%

    epson · wf-2750 firmwareAug 30, 2018

  • CVE-2023-38556
    30Monitor

    Improper input validation vulnerability in SEIKO EPSON printer Web Config allows a remote attacker to turned off the printer.

    HighCVSS 7.5No exploitEPSS 1%

    epson · ep-801a firmwareAug 2, 2023

  • CVE-2018-14903
    30Monitor

    EPSON WF-2750 printers with firmware JP02I2 do not properly validate files before running updates, which allows remote attackers to cause a

    HighCVSS 7.5No exploitEPSS 1%

    epson · wf-2750 firmwareAug 30, 2018

  • CVE-2015-6034
    27Monitor

    EPSON Network Utility 4.10 uses weak permissions (Everyone: Full Control) for eEBSVC.exe, which allows local users to gain privileges via a

    MediumCVSS 6.9No exploitEPSS 0%

    epson · network utilityOct 28, 2015

  • CVE-2023-27520
    26Monitor

    Cross-site request forgery (CSRF) vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote unauthenticated attacke

    MediumCVSS 6.5No exploitEPSS 0%

    epson · lp-9200ps2 firmwareApr 11, 2023