Cyber Resilience

CVE-2023-38556

High

Published: 02 August 2023

Published
02 August 2023
Modified
21 November 2024
KEV Added
Patch
CVSS Score v3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0040 61.1th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2023-38556 is a high-severity an unspecified weakness vulnerability in Epson Ep-801A Firmware. Its CVSS base score is 7.5 (High).

Operationally, ranked in the top 38.9% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

Improper input validation vulnerability in SEIKO EPSON printer Web Config allows a remote attacker to turned off the printer. [Note] Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers…

more

via a web browser. Web Config is pre-installed in some printers provided by SEIKO EPSON CORPORATION. For the details of the affected product names/model numbers, refer to the information provided by the vendor.

CWE(s)

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

epson
ep-801a firmware
all versions
epson
ep-802a firmware
all versions
epson
ep-901a firmware
all versions
epson
ep-901f firmware
all versions
epson
ep-902a firmware
all versions
epson
pa-tcu1 firmware
all versions
epson
pm-t960 firmware
all versions
epson
pm-t990 firmware
all versions
epson
px-201 firmware
all versions
epson
px-502a firmware
all versions
+2 more product configuration(s) — see NVD for full list

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References