HTML Injection Vulnerability in EPSON WF-2750 Printer Web Interface
CVE-2018-14899

6.1MEDIUM

Key Information:

Vendor

Epson

Status
Wf-2750 Firmware
Vendor
CVE Published:
30 August 2018

What is CVE-2018-14899?

The EPSON WF-2750 printer with firmware JP02I2 features a serious web interface vulnerability on its AirPrint Setup page. This vulnerability allows an attacker to exploit HTML injection, potentially redirecting users to malicious sites. By manipulating the web interface, attackers can craft a deceptive user experience, leading to unauthorized actions and risk exposure of sensitive information.

References

https://www.vdalabs.com/2018/08/26/epson-printer-vulnerab...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.