PT-2018-14892 · Epson · Epson Workforce Wf-2861

Published 2018-12-24 · Updated 2020-08-24 · CVE-2018-19248

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Epson WorkForce WF-2861 version 10.48 LQ22I3(Recovery-mode) Epson WorkForce WF-2861 version 10.51.LQ20I6 Epson WorkForce WF-2861 version 10.52.LQ17IA

Description The issue allows remote attackers to upload a firmware file and reset the printer without authentication. This is achieved by making a request to the "DOWN/FIRMWAREUPDATE/ROM1" API endpoint and a POST request to the "FIRMWAREUPDATE" API endpoint.

Recommendations For Epson WorkForce WF-2861 version 10.48 LQ22I3(Recovery-mode), restrict access to the "DOWN/FIRMWAREUPDATE/ROM1" and "FIRMWAREUPDATE" API endpoints until a patch is available. For Epson WorkForce WF-2861 version 10.51.LQ20I6, restrict access to the "DOWN/FIRMWAREUPDATE/ROM1" and "FIRMWAREUPDATE" API endpoints until a patch is available. For Epson WorkForce WF-2861 version 10.52.LQ17IA, restrict access to the "DOWN/FIRMWAREUPDATE/ROM1" and "FIRMWAREUPDATE" API endpoints until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2018-19248

Affected Products

Epson Workforce Wf-2861

References · 3

• 🔥❌ https://github.com/epistemophilia/CVEs/blob/master/Epson-WorkForce-WF2861/CVE-2018-19248/poc-cve-2018-19248.py · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2018-19248 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-19248 · Security Note