Read the docs
TI-2023-09403 Aliases CVE-2023-23572GHSA-78m5-76hf-68gx

Cross-site scripting in SEIKO EPSON printers/network interface Web Config

Priority LOW 23CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-79.

Summary

Cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script. [Note] Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers/network interface via a web browser. According to SEIKO EPSON CORPORATION, it is also called as Remote Manager in some products. Web Config is pre-installed in some printers/network interface provided by SEIKO EPSON CORPORATION. For the details of the affected product names/model numbers, refer to the information provided by the vendor.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00499 43rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SEIKO EPSON CORPORATIONSEIKO EPSON printers/network interface Web Configall versions—No fix listedCNA
  • SEIKO EPSON printers/network interface Web Config VendorSEIKO EPSON CORPORATION Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 100

CPEVersionsRoleVendor
cpe:2.3:o:epson:lp-9200ps2_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-9200ps2:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-9200ps3_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-9200ps3:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-8200c_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-8200c:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-9600_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-9600:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-9600s_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-9600s:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
Show 90 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:epson:lp-9300_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-9300:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-8500c_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-8500c:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-8700ps3_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-8700ps3:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-9800c_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-9800c:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-s5500_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-s5500:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-9200b_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-9200b:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-9200c_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-9200c:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-s4500_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-s4500:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-s6500_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-s6500:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-s7000_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-s7000:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-s5000_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-s5000:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-s4000_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-s4000:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-s6000_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-s6000:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-s5300_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-s5300:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-s5300r_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-s5300r:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-s300n_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-s300n:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-s310n_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-s310n:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-s3000_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-s3000:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-s3000r_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-s3000r:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-s3000z_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-s3000z:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-s3000ps_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-s3000ps:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-s7500_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-s7500:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-s7500ps_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-s7500ps:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-s3500_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-s3500:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-s4200_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-s4200:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-s9000_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-s9000:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-s7100_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-s7100:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:lp-s8100_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:lp-s8100:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:prifnw1_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:prifnw1:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:prifnw1s_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:prifnw1s:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:prifnw2_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:prifnw2:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:prifnw2ac_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:prifnw2ac:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:prifnw2s_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:prifnw2s:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:prifnw2sac_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:prifnw2sac:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:prifnw3_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:prifnw3:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:prifnw3s_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:prifnw3s:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:prifnw6_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:prifnw6:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:prifnw7_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:prifnw7:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:prifnw7u_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:prifnw7u:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:prifnw7s_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:prifnw7s:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:pa-w11g_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:pa-w11g:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:pa-w11g2_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:pa-w11g2:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:esnsb1_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:esnsb1:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:esnsb2_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:esnsb2:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION
cpe:2.3:o:epson:esifnw1_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSEIKO EPSON CORPORATION
cpe:2.3:h:epson:esifnw1:-:*:*:*:*:*:*:*not specified by NVDRunning onSEIKO EPSON CORPORATION

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-23572
  2. 2026-10-03 Alias added: GHSA-78m5-76hf-68gx

References

  • TI-2023-12245 Cross-site request forgery in SEIKO EPSON printers/network interface Web Config CVSS 3.1MEDIUM 6.5

Sources