PT-2018-14883 · Epson · Epson Workforce Wf-2861

Publicado 2018-12-24 · Atualizado 2020-08-24 · CVE-2018-19232

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Epson WorkForce WF-2861 version 10.48 LQ22I3(Recovery-mode) Epson WorkForce WF-2861 version 10.51.LQ20I6 Epson WorkForce WF-2861 version 10.52.LQ17IA

Description The issue allows remote attackers to cause a denial of service. This can be achieved via a FIRMWAREUPDATE GET request. For example, the "/DOWN/FIRMWAREUPDATE/ROM1" URI is vulnerable.

Recommendations For Epson WorkForce WF-2861 version 10.48 LQ22I3(Recovery-mode), restrict access to the FIRMWAREUPDATE GET request to minimize the risk of exploitation. For Epson WorkForce WF-2861 version 10.51.LQ20I6, avoid using the /DOWN/FIRMWAREUPDATE/ROM1 URI until the issue is resolved. For Epson WorkForce WF-2861 version 10.52.LQ17IA, consider disabling the FIRMWAREUPDATE functionality until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2018-19232

Produtos afetados

Epson Workforce Wf-2861

Referências · 3

• 🔥❌ https://github.com/epistemophilia/CVEs/blob/master/Epson-WorkForce-WF2861/CVE-2018-19232/poc-cve-2018-19232.py · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2018-19232 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-19232 · Aviso do Fabricante