Read the docs

SEIKO EPSON CORPORATION

Records43All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high21CVSS 7.0–8.9

Exploited now

SEIKO EPSON CORPORATION records in CISA KEV

No SEIKO EPSON CORPORATION vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Epson Workforce Wf-2861 Firmware 4 records MEDIUM Eps Tse Server 8 Firmware 3 records MEDIUM Wf-2750 Firmware 3 records LOW Ds-570w Firmware 2 records MEDIUM Ds-780n Firmware 2 records MEDIUM Easymp 2 records MEDIUM Ep-10va Firmware 2 records MEDIUM Ep-30va Firmware 2 records MEDIUM

Records

3 records in Eps Tse Server 8 Firmware · all components

TI-2020-17461 CVE-2020-28929 · GHSA-wrc6-j5cv-23xc

Unrestricted access to the log downloader functionality in EPSON EPS TSE Server 8…

Priority MEDIUM 45

Unrestricted access to the log downloader functionality in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to remotely retrieve administrative hashed credentials via the maintenance/troubleshoot.php?d…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01247 Published 2020-12-16 No fix listed CWE-306
TI-2020-17463 CVE-2020-28931 · GHSA-pcmg-wjrm-9r44

Lack of an anti-CSRF token in the entire administrative interface in EPSON EPS TSE Server…

Priority LOW 39

Lack of an anti-CSRF token in the entire administrative interface in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to force an administrator to execute external POST requests by visiting a malicious…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00511 Published 2020-12-16 No fix listed CWE-352
TI-2020-17462 CVE-2020-28930 · GHSA-gw7h-3fw6-97j4

A Cross-Site Scripting (XSS) issue in the 'update user' and 'delete user' functionalities…

Priority LOW 25

A Cross-Site Scripting (XSS) issue in the 'update user' and 'delete user' functionalities in settings/users.php in EPSON EPS TSE Server 8 (21.0.11) allows an authenticated attacker to inject a JavaScript payload in the u…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00633 Published 2020-12-16 No fix listed CWE-79
Open these records in search →