What’s Vulnerable › Vulnerabilities

CVE-2022-36133

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-11-25 · updated 2026-06-17
• Weakness: CWE-287

Description

The WebConfig functionality of Epson TM-C3500 and TM-C7500 devices with firmware version WAM31500 allows authentication bypass.

Affected products

• Epson Tm-C3500 Firmware: wam31500
• Epson Tm-C3510 Firmware: wam31500
• Epson Tm-C3520 Firmware: wam31500
• Epson Tm-C7500 Firmware: wam31500
• Epson Tm-C7500G Firmware: wam31500
• Epson Tm-C7510 Firmware: wam31500
• Epson Tm-C7510G Firmware: wam31500
• Epson Tm-C7520 Firmware: wam31500
• Epson Tm-C7520G Firmware: wam31500

References

• https://download.epson-biz.com/epson/epson_public_document.php?name=Infomation_history.pdf
• https://download.epson-biz.com/modules/colorworks/
• https://download.epson-biz.com/epson/epson_public_document.php?name=Infomation_history.pdf
• https://download.epson-biz.com/modules/colorworks/

Get alerted when CVE-2022-36133 or the next vulnerability affects your stack