PT-2019-8700 · Epson · Pf-70+48

Toshitsugu Yoneyama · Published 2019-01-09 · Updated 2019-02-15 · CVE-2018-0688

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SEIKO EPSON printers and scanners versions prior to various firmware versions released between 2017 and 2018, including but not limited to: DS-570W firmware versions released prior to 2018 March 13 DS-780N firmware versions released prior to 2018 March 13 EP-10VA firmware versions released prior to 2017 September 4 EP-30VA firmware versions released prior to 2017 June 19 EP-707A firmware versions released prior to 2017 August 1 EP-708A firmware versions released prior to 2017 August 7 EP-709A firmware versions released prior to 2017 June 12 EP-777A firmware versions released prior to 2017 August 1 EP-807AB/AW/AR firmware versions released prior to 2017 August 1 EP-808AB/AW/AR firmware versions released prior to 2017 August 7 EP-879AB/AW/AR firmware versions released prior to 2017 June 12 EP-907F firmware versions released prior to 2017 August 1 EP-977A3 firmware versions released prior to 2017 August 1 EP-978A3 firmware versions released prior to 2017 August 7 EP-979A3 firmware versions released prior to 2017 June 12 EP-M570T firmware versions released prior to 2017 September 6 EW-M5071FT firmware versions released prior to 2017 November 2 EW-M660FT firmware versions released prior to 2018 April 19 EW-M770T firmware versions released prior to 2017 September 6 PF-70 firmware versions released prior to 2018 April 20 PF-71 firmware versions released prior to 2017 July 18 PF-81 firmware versions released prior to 2017 September 14 PX-048A firmware versions released prior to 2017 July 4 PX-049A firmware versions released prior to 2017 September 11 PX-437A firmware versions released prior to 2017 July 24 PX-M350F firmware versions released prior to 2018 February 23 PX-M5040F firmware versions released prior to 2017 November 20 PX-M5041F firmware versions released prior to 2017 November 20 PX-M650A firmware versions released prior to 2017 October 17 PX-M650F firmware versions released prior to 2017 October 17 PX-M680F firmware versions released prior to 2017 June 29 PX-M7050F firmware versions released prior to 2017 October 13 PX-M7050FP firmware versions released prior to 2017 October 13 PX-M7050FX firmware versions released prior to 2017 November 7 PX-M7070FX firmware versions released prior to 2017 April 27 PX-M740F firmware versions released prior to 2017 December 4 PX-M741F firmware versions released prior to 2017 December 4 PX-M780F firmware versions released prior to 2017 June 29 PX-M781F firmware versions released prior to 2017 June 27 PX-M840F firmware versions released prior to 2017 November 16 PX-M840FX firmware versions released prior to 2017 December 8 PX-M860F firmware versions released prior to 2017 October 25 PX-S05B/W firmware versions released prior to 2018 March 9 PX-S350 firmware versions released prior to 2018 February 23 PX-S5040 firmware versions released prior to 2017 November 20 PX-S7050 firmware versions released prior to 2018 February 21 PX-S7050PS firmware versions released prior to 2018 February 21 PX-S7050X firmware versions released prior to 2017 November 7 PX-S7070X firmware versions released prior to 2017 April 27 PX-S740 firmware versions released prior to 2017 December 3 PX-S840 firmware versions released prior to 2017 November 16 PX-S840X firmware versions released prior to 2017 December 8 PX-S860 firmware versions released prior to 2017 December 7

Description The issue is an open redirect vulnerability that allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the web interface of the affected product.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2018-0688

Affected Products

Ds-570W

Ds-780N

Ep-10Va

Ep-30Va

Ep-707A

Ep-708A

Ep-709A

Ep-777A

Ep-807Ab/Aw/Ar

Ep-808Ab/Aw/Ar

Ep-879Ab/Aw/Ar

Ep-907F

Ep-977A3

Ep-978A3

Ep-979A3

Ep-M570T

Ew-M5071Ft

Ew-M660Ft

Ew-M770T

Pf-70

Pf-71

Pf-81

Px-048A

Px-049A

Px-437A

Px-M350F

Px-M5040F

Px-M5041F

Px-M650A

Px-M650F

Px-M680F

Px-M7050Fp

Px-M7050Fx

Px-M7070Fx

Px-M740F

Px-M741F

Px-M780F

Px-M781F

Px-M840Fx

Px-M860F

Px-S05B/W

Px-S350

Px-S5040

Px-S7050X

Px-S7050Ps

Px-S7070X

Px-S740

Px-S840X

Px-S860

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-0688 · Security Note
• https://epson.jp/support/misc/20181203_oshirase.htm · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-0688 · Vendor Advisory
• https://jvn.jp/en/jp/JVN89767228/index.html · Note