CVEvulnerability

CVE-2026-23767

9.8 CRITICAL Published 2026-03-05 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2026-03-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-306

Description

ESC/POS, a printer control language designed by Seiko Epson Corporation, lacks mechanisms for user authentication and command authorization, does not provide controls to restrict sources or destinations of network communication, and transmits commands without encryption or integrity protection.

Affected configurations

• epson sb-h50 firmware • epson tm-h6000v firmware • epson tm-l100 firmware • epson tm-m10 firmware • epson tm-m30 firmware • epson tm-m30ii firmware • epson tm-m30ii-h firmware • epson tm-m30ii-s firmware • epson tm-m30ii-sl firmware • epson tm-m30iii firmware • epson tm-m30iii-h firmware • epson tm-m55 firmware • epson tm-p20ii firmware • epson tm-p80ii firmware • epson tm-p20 firmware • epson tm-p60ii firmware • epson tm-p80 firmware • epson tm-t20ii firmware • epson tm-t20iii firmware • epson tm-t88vi firmware • epson tm-t88vi-ihub firmware • epson tm-t88vii firmware • epson ub-r04 firmware • epson ub-e04 firmware

Related

Weakness · CWE (1)

  • CWE-306 Missing Authentication for Critical Functionality weakness

References