MEDIUM🇵🇱 Wersja polska

CVE-2018-14899

CVSS 6.1v3.0pub. 2018-08-30upd. 2024-11-21

On the EPSON WF-2750 printer with firmware JP02I2, the Web interface AirPrint Setup page is vulnerable to HTML Injection that can redirect users to malicious sites.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

  • Epson Wf 2750

    HW
    Epson
    all versions

  • Epson Wf 2750 Firmware

    OS
    Epson
    jp02l2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2018-14900HIGH7.5same product

On EPSON WF-2750 printers with firmware JP02I2, there is no filtering of print jobs. Remote attackers can send...

CVE-2018-14903HIGH7.5same product

EPSON WF-2750 printers with firmware JP02I2 do not properly validate files before running updates, which allow...

CVE-2026-23767CRITICAL9.8PL ✓same vendor

Brak uwierzytelniania i szyfrowania w protokole ESC/POS urządzeń Epson

CVE-2022-36133CRITICAL9.1PL ✓same vendor

Pominięcie uwierzytelnienia w WebConfig urządzeń Epson TM-C3500/TM-C7500

CVE-2020-28929CRITICAL9.8PL ✓same vendor

EPSON EPS TSE Server 8 — nieautoryzowany dostęp do poświadczeń administratora