CVEvulnerability

CVE-2018-0689

8.8 HIGH Published 2019-01-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-01-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-113

Description

HTTP header injection vulnerability in SEIKO EPSON printers and scanners (DS-570W firmware versions released prior to 2018 March 13, DS-780N firmware versions released prior to 2018 March 13, EP-10VA firmware versions released prior to 2017 September 4, EP-30VA firmware versions released prior to 2017 June 19, EP-707A firmware versions released prior to 2017 August 1, EP-708A firmware versions released prior to 2017 August 7, EP-709A firmware versions released prior to 2017 June 12, EP-777A firmware versions released prior to 2017 August 1, EP-807AB/AW/AR firmware versions released prior to 2017 August 1, EP-808AB/AW/AR firmware versions released prior to 2017 August 7, EP-879AB/AW/AR firmware versions released prior to 2017 June 12, EP-907F firmware versions released prior to 2017 August 1, EP-977A3 firmware versions released prior to 2017 August 1, EP-978A3 firmware versions released prior to 2017 August 7, EP-979A3 firmware versions released prior to 2017 June 12, EP-M570T firmware versions released prior to 2017 September 6, EW-M5071FT firmware versions released prior to 2017 November 2, EW-M660FT firmware versions released prior to 2018 April 19, EW-M770T firmware versions released prior to 2017 September 6, PF-70 firmware versions released prior to 2018 April 20, PF-71 firmware versions released prior to 2017 July 18, PF-81 firmware versions released prior to 2017 September 14, PX-048A firmware versions released prior to 2017 July 4, PX-049A firmware versions released prior to 2017 September 11, PX-437A firmware versions released prior to 2017 July 24, PX-M350F firmware versions released prior to 2018 February 23, PX-M5040F firmware versions released prior to 2017 November 20, PX-M5041F firmware versions released prior to 2017 November 20, PX-M650A firmware versions released prior to 2017 October 17, PX-M650F firmware versions released prior to 2017 October 17, PX-M680F firmware versions released prior to 2017 June 29, PX-M7050F firmware versions released prior to 2017 October 13, PX-M7050FP firmware versions released prior to 2017 October 13, PX-M7050FX firmware versions released prior to 2017 November 7, PX-M7070FX firmware versions released prior to 2017 April 27, PX-M740F firmware versions released prior to 2017 December 4, PX-M741F firmware versions released prior to 2017 December 4, PX-M780F firmware versions released prior to 2017 June 29, PX-M781F firmware versions released prior to 2017 June 27, PX-M840F firmware versions released prior to 2017 November 16, PX-M840FX firmware versions released prior to 2017 December 8, PX-M860F firmware versions released prior to 2017 October 25, PX-S05B/W firmware versions released prior to 2018 March 9, PX-S350 firmware versions released prior to 2018 February 23, PX-S5040 firmware versions released prior to 2017 November 20, PX-S7050 firmware versions released prior to 2018 February 21, PX-S7050PS firmware versions released prior to 2018 February 21, PX-S7050X firmware versions released prior to 2017 November 7, PX-S7070X firmware versions released prior to 2017 April 27, PX-S740 firmware versions released prior to 2017 December 3, PX-S840 firmware versions released prior to 2017 November 16, PX-S840X firmware versions released prior to 2017 December 8, PX-S860 firmware versions released prior to 2017 December 7) may allow a remote attackers to lead a user to a phishing site or execute an arbitrary script on the user's web browser.

Affected configurations

• epson ds-570w firmware (< 2018-03-13) • epson ds-780n firmware (< 2018-03-13) • epson ep-10va firmware (< 2017-09-04) • epson ep-30va firmware (< 2017-06-19) • epson ep-707a firmware (< 2017-08-01) • epson ep-708a firmware (< 2017-08-07) • epson ep-709a firmware (< 2017-06-12) • epson ep-777a firmware (< 2017-08-01) • epson ep-807ab firmware (< 2017-08-01) • epson ep-807aw firmware (< 2017-08-01) • epson ep-807ar firmware (< 2017-08-01) • epson ep-808ab firmware (< 2017-08-07) • epson ep-808aw firmware (< 2017-08-07) • epson ep-808ar firmware (< 2017-08-07) • epson ep-879ab firmware (< 2017-06-12) • epson ep-879aw firmware (< 2017-06-12) • epson ep-879ar firmware (< 2017-06-12) • epson ep-907f firmware (< 2017-08-01) • epson ep-977a3 firmware (< 2017-08-01) • epson ep-978a3 firmware (< 2017-08-07) • epson ep-979a3 firmware (< 2017-06-12) • epson ep-m570t firmware (< 2017-09-06) • epson ew-m5071ft firmware (< 2017-11-02) • epson ew-m660ft firmware (< 2018-04-19) • epson ew-m770t firmware (< 2017-09-06) • epson pf-70 firmware (< 2018-04-20) • epson pf-71 firmware (< 2017-07-18) • epson pf-81 firmware (< 2017-09-14) • epson px-048a firmware (< 2017-07-04) • epson px-049a firmware (< 2017-09-11) • epson px-437a firmware (< 2017-07-24) • epson px-m350f firmware (< 2018-02-23) • epson px-m5040f firmware (< 2017-11-20) • epson px-m5041f firmware (< 2017-11-20) • epson px-m650a firmware (< 2017-10-17) • epson px-m650f firmware (< 2017-10-17) • epson px-m680f firmware (< 2017-06-29) • epson px-m7050f firmware (< 2017-10-13) • epson px-m7050fp firmware (< 2017-10-13) • epson px-m7050fx firmware (< 2017-11-07) • epson px-m7070fx firmware (< 2017-04-27) • epson px-m740f firmware (< 2017-06-29) • epson px-m781f firmware (< 2017-06-27) • epson px-m840f firmware (< 2017-11-16) • epson px-m840fx firmware (< 2017-12-08) • epson px-m860f firmware (< 2017-10-25) • epson px-s05b firmware (< 2018-03-09) • epson px-s05w firmware (< 2018-03-09) • epson px-s350 firmware (< 2018-02-23) • epson px-s5040 firmware (< 2017-11-20) • epson px-s7050 firmware (< 2018-02-21) • epson px-s7050ps firmware (< 2018-02-21) • epson px-s7050x firmware (< 2017-11-07) • epson px-s7070x firmware (< 2017-04-27) • epson px-s740 firmware (< 2017-12-03) • epson px-s840 firmware (< 2017-11-16) • epson px-s840x firmware (< 2017-12-08) • epson px-s860 firmware (< 2017-12-07)

Related

Weakness · CWE (1)

  • CWE-113 Improper Neutralization of CRLF Sequences in HTTP Headers weakness

References