The WebConfig functionality of Epson TM-C3500 and TM-C7500 devices with firmware version WAM31500 allows authentication bypass.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:HEpson Tm C3500
HWEpsonall versionsEpson Tm C3500 Firmware
OSEpsonwam31500Epson Tm C3510
HWEpsonall versionsEpson Tm C3510 Firmware
OSEpsonwam31500Epson Tm C3520
HWEpsonall versionsEpson Tm C3520 Firmware
OSEpsonwam31500Epson Tm C7500
HWEpsonall versionsEpson Tm C7500 Firmware
OSEpsonwam31500Epson Tm C7500g
HWEpsonall versionsEpson Tm C7500g Firmware
OSEpsonwam31500Epson Tm C7510
HWEpsonall versionsEpson Tm C7510 Firmware
OSEpsonwam31500Epson Tm C7510g
HWEpsonall versionsEpson Tm C7510g Firmware
OSEpsonwam31500Epson Tm C7520
HWEpsonall versionsEpson Tm C7520 Firmware
OSEpsonwam31500Epson Tm C7520g
HWEpsonall versionsEpson Tm C7520g Firmware
OSEpsonwam31500
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
Related vulnerabilities
CVE-2026-23767CRITICAL9.8PL ✓same vendor
Brak uwierzytelniania i szyfrowania w protokole ESC/POS urządzeń Epson
CVE-2020-28929CRITICAL9.8PL ✓same vendor
EPSON EPS TSE Server 8 — nieautoryzowany dostęp do poświadczeń administratora
CVE-2020-6091CRITICAL9.1PL ✓same vendor
Pominięcie uwierzytelniania w EPSON Web Control (Epson EB-1470Ui)
CVE-2018-19248CRITICAL9.1PL ✓same vendor
Epson WorkForce WF-2861 — wgranie firmware bez uwierzytelnienia
CVE-2017-12860CRITICAL9.8PL ✓same vendor
Epson EasyMP — zakodowany na stałe kod backdoor umożliwiający nieautoryzowany dostęp