What’s Vulnerable › Vulnerabilities

CVE-2018-5550

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 36.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-02-08 · updated 2026-06-17
• Weakness: CWE-79

Description

Versions of Epson AirPrint released prior to January 19, 2018 contain a reflective cross-site scripting (XSS) vulnerability, which can allow untrusted users on the network to hijack a session cookie or perform other reflected XSS attacks on a currently logged-on user.

Affected products

• Epson AirPrint: before 1-19-2018 — fixed in 1-19-2018

How to fix

Upgrade to a fixed version: Epson AirPrint 1-19-2018. Check the vendor advisory for mitigations.

References

• https://blog.rapid7.com/2018/02/08/r7-2017-28-epson-airprint-xss-cve-2018-5550/
• https://epson.com/support/wa00860
• https://blog.rapid7.com/2018/02/08/r7-2017-28-epson-airprint-xss-cve-2018-5550/
• https://epson.com/support/wa00860

Get alerted when CVE-2018-5550 or the next vulnerability affects your stack