PT-2018-14745 · Epson · Epson Workforce Wf-2861

Published 2018-12-24 · Updated 2020-08-24 · CVE-2018-18960

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Epson WorkForce WF-2861 versions 10.48 LQ22I3, 10.51.LQ20I6, 10.52.LQ17IA

Description An issue was discovered where the devices use SNMP to find certain devices on the network, but the default version is v2c, allowing an amplification attack.

Recommendations For version 10.48 LQ22I3, consider configuring SNMP to use a more secure version to prevent amplification attacks. For version 10.51.LQ20I6, consider configuring SNMP to use a more secure version to prevent amplification attacks. For version 10.52.LQ17IA, consider configuring SNMP to use a more secure version to prevent amplification attacks.

Exploit

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2018-18960

Affected Products

Epson Workforce Wf-2861

References · 3

• 🔥❌ https://github.com/epistemophilia/CVEs/blob/master/Epson-WorkForce-WF2861/CVE-2018-18960/poc-cve-2018-18960.py · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2018-18960 · Security Note
• https://osv.dev/vulnerability/CVE-2018-18960 · Vendor Advisory