Unauthorized Access Vulnerability in Epson Expression Home Printers
CVE-2019-20458

8.8HIGH

Key Information:

Vendor

Epson

Vendor
CVE Published:
7 November 2024

What is CVE-2019-20458?

A security issue has been identified affecting the Epson Expression Home XP255 printer model. These devices are configured to operate without requiring a password for access to the web administration panel. As a result, users are never prompted to create a password, leaving many devices vulnerable to unauthorized access. Consequently, anyone who connects to the web admin interface can potentially gain administrative control without any authentication, posing a significant security risk.

References

https://epson.com/Support/wa00826
https://seclists.org/fulldisclosure/2024/Jul/14
mailing-list

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.