What’s Vulnerable › Vulnerabilities

CVE-2023-38556

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-08-02 · updated 2026-06-17

Description

Improper input validation vulnerability in SEIKO EPSON printer Web Config allows a remote attacker to turned off the printer. [Note] Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers via a web browser. Web Config is pre-installed in some printers provided by SEIKO EPSON CORPORATION. For the details of the affected product names/model numbers, refer to the information provided by the vendor.

Affected products

• Epson Ep-801A Firmware: all versions
• Epson Ep-802A Firmware: all versions
• Epson Ep-901A Firmware: all versions
• Epson Ep-901F Firmware: all versions
• Epson Ep-902A Firmware: all versions
• Epson Pa-Tcu1 Firmware: all versions
• Epson Pm-T960 Firmware: all versions
• Epson Pm-T990 Firmware: all versions
• Epson Px-201 Firmware: all versions
• Epson Px-502A Firmware: all versions
• Epson Px-601F Firmware: all versions
• Epson Px-602F Firmware: all versions

References

• https://jvn.jp/en/jp/JVN61337171/
• https://www.epson.jp/support/misc_t/230802_oshirase.htm
• https://jvn.jp/en/jp/JVN61337171/
• https://www.epson.jp/support/misc_t/230802_oshirase.htm

Get alerted when CVE-2023-38556 or the next vulnerability affects your stack