CVEvulnerability
CVE-2023-23572
4.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-04-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.8 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 4.8 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script. [Note] Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers/network interface via a web browser. According to SEIKO EPSON CORPORATION, it is also called as Remote Manager in some products. Web Config is pre-installed in some printers/network interface provided by SEIKO EPSON CORPORATION. For the details of the affected product names/model numbers, refer to the information provided by the vendor.
Affected configurations
• epson lp-9200ps2 firmware
• epson lp-9200ps3 firmware
• epson lp-8200c firmware
• epson lp-9600 firmware
• epson lp-9600s firmware
• epson lp-9300 firmware
• epson lp-8500c firmware
• epson lp-8700ps3 firmware
• epson lp-9800c firmware
• epson lp-s5500 firmware
• epson lp-9200b firmware
• epson lp-9200c firmware
• epson lp-s4500 firmware
• epson lp-s6500 firmware
• epson lp-s7000 firmware
• epson lp-s5000 firmware
• epson lp-s4000 firmware
• epson lp-s6000 firmware
• epson lp-s5300 firmware
• epson lp-s5300r firmware
• epson lp-s300n firmware
• epson lp-s310n firmware
• epson lp-s3000 firmware
• epson lp-s3000r firmware
• epson lp-s3000z firmware
• epson lp-s3000ps firmware
• epson lp-s7500 firmware
• epson lp-s7500ps firmware
• epson lp-s3500 firmware
• epson lp-s4200 firmware
• epson lp-s9000 firmware
• epson lp-s7100 firmware
• epson lp-s8100 firmware
• epson prifnw1 firmware
• epson prifnw1s firmware
• epson prifnw2 firmware
• epson prifnw2ac firmware
• epson prifnw2s firmware
• epson prifnw2sac firmware
• epson prifnw3 firmware
• epson prifnw3s firmware
• epson prifnw6 firmware
• epson prifnw7 firmware
• epson prifnw7u firmware
• epson prifnw7s firmware
• epson pa-w11g firmware
• epson pa-w11g2 firmware
• epson esnsb1 firmware
• epson esnsb2 firmware
• epson esifnw1 firmware
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://jvn.jp/en/jp/JVN82424996/ Third Party Advisory
- https://www.epson.jp/support/misc_t/230308_oshirase.htm Mitigation, Vendor Advisory
- https://jvn.jp/en/jp/JVN82424996/ Third Party Advisory
- https://www.epson.jp/support/misc_t/230308_oshirase.htm Mitigation, Vendor Advisory