PT-2020-18918 · Epson · Epson Eb-1470Ui Main+1

Yuri Kramarz · Published 2020-05-22 · Updated 2024-11-10 · CVE-2020-6091

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Epson EB-1470Ui MAIN version 98009273ESWWV107 Epson EB-1470Ui MAIN2 version 8X7325WWV303

Description An exploitable authentication bypass issue exists in the ESPON Web Control functionality. A specially crafted series of HTTP requests can cause authentication bypass, resulting in information disclosure. An attacker can send an HTTP request to trigger this issue.

Recommendations For Epson EB-1470Ui MAIN version 98009273ESWWV107, update to a version that addresses the authentication bypass issue in the ESPON Web Control functionality. For Epson EB-1470Ui MAIN2 version 8X7325WWV303, update to a version that addresses the authentication bypass issue in the ESPON Web Control functionality. As a temporary workaround, consider restricting access to the ESPON Web Control functionality until a patch is available.

Fix

Improper Authentication

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-287

CWE-288

Related Identifiers

CVE-2020-6091

Affected Products

Epson Eb-1470Ui Main

Epson Eb-1470Ui Main2

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-6091 · Security Note
• https://epson.com/support/wa00907 · Note
• https://talosintelligence.com/vulnerability_reports/TALOS-2020-1011 · Note
• https://twitter.com/transilienceai/status/1855476515036660048 · Twitter Post
• https://t.me/cvenotify/4016 · Telegram Post