What’s Vulnerable › Vulnerabilities

CVE-2024-47295

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-10-01 · updated 2026-06-17
• Weakness: CWE-1188

Description

Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote unauthenticated attacker to set an arbitrary password and operate the device with an administrative privilege. As for the details of the affected versions, see the information provided by the vendor under [References].

Affected products

• SEIKO EPSON CORPORATION Web Config: all versions

References

• https://epson.com/Support/wa00958
• https://jvn.jp/en/vu/JVNVU95133448/
• https://www.epson.jp/support/misc_t/240930_03_oshirase.htm

Get alerted when CVE-2024-47295 or the next vulnerability affects your stack