Hard-Coded API and Secret Keys in EPSON iPrint Application for Android
CVE-2018-14901

7.5HIGH

Key Information:

Vendor

Epson

Status
Iprint
Vendor
CVE Published:
30 August 2018

What is CVE-2018-14901?

The EPSON iPrint application for Android version 6.6.3 has been found to contain hard-coded API and secret keys for multiple cloud services, including Dropbox, Box, Evernote, and OneDrive. This security flaw can potentially lead to unauthorized access to user accounts and sensitive data, making it critical for users to be aware of the implications of this vulnerability and implement necessary security measures.

References

https://www.vdalabs.com/2018/08/26/epson-printer-vulnerab...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.