CVEvulnerability
CVE-2018-0689
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-01-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-113
Description
HTTP header injection vulnerability in SEIKO EPSON printers and scanners (DS-570W firmware versions released prior to 2018 March 13, DS-780N firmware versions released prior to 2018 March 13, EP-10VA firmware versions released prior to 2017 September 4, EP-30VA firmware versions released prior to 2017 June 19, EP-707A firmware versions released prior to 2017 August 1, EP-708A firmware versions released prior to 2017 August 7, EP-709A firmware versions released prior to 2017 June 12, EP-777A firmware versions released prior to 2017 August 1, EP-807AB/AW/AR firmware versions released prior to 2017 August 1, EP-808AB/AW/AR firmware versions released prior to 2017 August 7, EP-879AB/AW/AR firmware versions released prior to 2017 June 12, EP-907F firmware versions released prior to 2017 August 1, EP-977A3 firmware versions released prior to 2017 August 1, EP-978A3 firmware versions released prior to 2017 August 7, EP-979A3 firmware versions released prior to 2017 June 12, EP-M570T firmware versions released prior to 2017 September 6, EW-M5071FT firmware versions released prior to 2017 November 2, EW-M660FT firmware versions released prior to 2018 April 19, EW-M770T firmware versions released prior to 2017 September 6, PF-70 firmware versions released prior to 2018 April 20, PF-71 firmware versions released prior to 2017 July 18, PF-81 firmware versions released prior to 2017 September 14, PX-048A firmware versions released prior to 2017 July 4, PX-049A firmware versions released prior to 2017 September 11, PX-437A firmware versions released prior to 2017 July 24, PX-M350F firmware versions released prior to 2018 February 23, PX-M5040F firmware versions released prior to 2017 November 20, PX-M5041F firmware versions released prior to 2017 November 20, PX-M650A firmware versions released prior to 2017 October 17, PX-M650F firmware versions released prior to 2017 October 17, PX-M680F firmware versions released prior to 2017 June 29, PX-M7050F firmware versions released prior to 2017 October 13, PX-M7050FP firmware versions released prior to 2017 October 13, PX-M7050FX firmware versions released prior to 2017 November 7, PX-M7070FX firmware versions released prior to 2017 April 27, PX-M740F firmware versions released prior to 2017 December 4, PX-M741F firmware versions released prior to 2017 December 4, PX-M780F firmware versions released prior to 2017 June 29, PX-M781F firmware versions released prior to 2017 June 27, PX-M840F firmware versions released prior to 2017 November 16, PX-M840FX firmware versions released prior to 2017 December 8, PX-M860F firmware versions released prior to 2017 October 25, PX-S05B/W firmware versions released prior to 2018 March 9, PX-S350 firmware versions released prior to 2018 February 23, PX-S5040 firmware versions released prior to 2017 November 20, PX-S7050 firmware versions released prior to 2018 February 21, PX-S7050PS firmware versions released prior to 2018 February 21, PX-S7050X firmware versions released prior to 2017 November 7, PX-S7070X firmware versions released prior to 2017 April 27, PX-S740 firmware versions released prior to 2017 December 3, PX-S840 firmware versions released prior to 2017 November 16, PX-S840X firmware versions released prior to 2017 December 8, PX-S860 firmware versions released prior to 2017 December 7) may allow a remote attackers to lead a user to a phishing site or execute an arbitrary script on the user's web browser.
Affected configurations
• epson ds-570w firmware (< 2018-03-13)
• epson ds-780n firmware (< 2018-03-13)
• epson ep-10va firmware (< 2017-09-04)
• epson ep-30va firmware (< 2017-06-19)
• epson ep-707a firmware (< 2017-08-01)
• epson ep-708a firmware (< 2017-08-07)
• epson ep-709a firmware (< 2017-06-12)
• epson ep-777a firmware (< 2017-08-01)
• epson ep-807ab firmware (< 2017-08-01)
• epson ep-807aw firmware (< 2017-08-01)
• epson ep-807ar firmware (< 2017-08-01)
• epson ep-808ab firmware (< 2017-08-07)
• epson ep-808aw firmware (< 2017-08-07)
• epson ep-808ar firmware (< 2017-08-07)
• epson ep-879ab firmware (< 2017-06-12)
• epson ep-879aw firmware (< 2017-06-12)
• epson ep-879ar firmware (< 2017-06-12)
• epson ep-907f firmware (< 2017-08-01)
• epson ep-977a3 firmware (< 2017-08-01)
• epson ep-978a3 firmware (< 2017-08-07)
• epson ep-979a3 firmware (< 2017-06-12)
• epson ep-m570t firmware (< 2017-09-06)
• epson ew-m5071ft firmware (< 2017-11-02)
• epson ew-m660ft firmware (< 2018-04-19)
• epson ew-m770t firmware (< 2017-09-06)
• epson pf-70 firmware (< 2018-04-20)
• epson pf-71 firmware (< 2017-07-18)
• epson pf-81 firmware (< 2017-09-14)
• epson px-048a firmware (< 2017-07-04)
• epson px-049a firmware (< 2017-09-11)
• epson px-437a firmware (< 2017-07-24)
• epson px-m350f firmware (< 2018-02-23)
• epson px-m5040f firmware (< 2017-11-20)
• epson px-m5041f firmware (< 2017-11-20)
• epson px-m650a firmware (< 2017-10-17)
• epson px-m650f firmware (< 2017-10-17)
• epson px-m680f firmware (< 2017-06-29)
• epson px-m7050f firmware (< 2017-10-13)
• epson px-m7050fp firmware (< 2017-10-13)
• epson px-m7050fx firmware (< 2017-11-07)
• epson px-m7070fx firmware (< 2017-04-27)
• epson px-m740f firmware (< 2017-06-29)
• epson px-m781f firmware (< 2017-06-27)
• epson px-m840f firmware (< 2017-11-16)
• epson px-m840fx firmware (< 2017-12-08)
• epson px-m860f firmware (< 2017-10-25)
• epson px-s05b firmware (< 2018-03-09)
• epson px-s05w firmware (< 2018-03-09)
• epson px-s350 firmware (< 2018-02-23)
• epson px-s5040 firmware (< 2017-11-20)
• epson px-s7050 firmware (< 2018-02-21)
• epson px-s7050ps firmware (< 2018-02-21)
• epson px-s7050x firmware (< 2017-11-07)
• epson px-s7070x firmware (< 2017-04-27)
• epson px-s740 firmware (< 2017-12-03)
• epson px-s840 firmware (< 2017-11-16)
• epson px-s840x firmware (< 2017-12-08)
• epson px-s860 firmware (< 2017-12-07)
Related
Weakness · CWE (1)
- CWE-113 Improper Neutralization of CRLF Sequences in HTTP Headers weakness
References
- https://jvn.jp/en/jp/JVN89767228/index.html Third Party Advisory, VDB Entry
- https://www.epson.jp/support/misc/20181203_oshirase.htm Vendor Advisory
- https://jvn.jp/en/jp/JVN89767228/index.html Third Party Advisory, VDB Entry
- https://www.epson.jp/support/misc/20181203_oshirase.htm Vendor Advisory