Hiroki Yasui

**Name of the Vulnerable Software and Affected Versions** Brother products (affected versions not specified) **Description** An improper authentication vulnerability exists in multiple printers and scanners that implement Web Based Management provided by BROTHER INDUSTRIES, LTD. This vulnerability can be exploited by a network-adjacent user to impersonate an administrative user. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Brother printers and scanners (affected versions not specified) **Description** A cross-site request forgery issue allows a remote unauthenticated attacker to perform unintended operations on the affected product. The vulnerability is present in multiple printers and scanners that implement Web Based Management provided by BROTHER INDUSTRIES, LTD. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SEIKO EPSON printers/network interface Web Config (affected versions not specified) **Description** A cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated attacker with administrative privilege to inject an arbitrary script. Web Config is a software that enables users to check the status and change the settings of SEIKO EPSON printers/network interface via a web browser. It is also known as Remote Manager in some products and is pre-installed in some printers/network interface provided by SEIKO EPSON CORPORATION. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SEIKO EPSON printers/network interface Web Config (affected versions not specified) **Description** A cross-site request forgery (CSRF) issue allows a remote unauthenticated attacker to hijack the authentication and perform unintended operations by having a logged-in user view a malicious page. Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers/network interface via a web browser, also known as Remote Manager in some products. It is pre-installed in some printers/network interface provided by SEIKO EPSON CORPORATION. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Aficio SP 4210N firmware versions prior to Web Support 1.05 **Description** A cross-site scripting issue allows a remote authenticated attacker with administrative privileges to inject an arbitrary script. **Recommendations** For Aficio SP 4210N firmware versions prior to Web Support 1.05, update to Web Support 1.05 or later to resolve the issue.