PT-2018-14745 · Epson · Epson Workforce Wf-2861

Publicado 2018-12-24 · Atualizado 2020-08-24 · CVE-2018-18960

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Epson WorkForce WF-2861 versions 10.48 LQ22I3, 10.51.LQ20I6, 10.52.LQ17IA

Description An issue was discovered where the devices use SNMP to find certain devices on the network, but the default version is v2c, allowing an amplification attack.

Recommendations For version 10.48 LQ22I3, consider configuring SNMP to use a more secure version to prevent amplification attacks. For version 10.51.LQ20I6, consider configuring SNMP to use a more secure version to prevent amplification attacks. For version 10.52.LQ17IA, consider configuring SNMP to use a more secure version to prevent amplification attacks.

Exploit

Correção

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2018-18960

Produtos afetados

Epson Workforce Wf-2861

Referências · 3

• 🔥❌ https://github.com/epistemophilia/CVEs/blob/master/Epson-WorkForce-WF2861/CVE-2018-18960/poc-cve-2018-18960.py · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2018-18960 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-18960 · Aviso do Fabricante