PT-2025-46732 · Epson · Epson Stylus Sx510W

Rafael Pedrero · Published 2025-11-12 · Updated 2025-11-13 · CVE-2023-7326

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Epson Stylus SX510W (affected versions not specified)

Description The embedded web management service in the Epson Stylus SX510W does not correctly process consecutive ampersand characters within query parameters when accessing the ''/PRESENTATION/HTML/TOP/INDEX.HTML'' endpoint. Sending a crafted request with this issue can lead to incorrect input parsing or memory handling, potentially causing the printer process to terminate or the device to power off, resulting in a denial of service. The vulnerable parameter is within the query string of the specified API endpoint.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2023-7326

Affected Products

Epson Stylus Sx510W

References · 5

• 🔥 https://exploit-db.com/exploits/51441 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-7326 · Security Note
• https://twitter.com/CVEnew/status/1988820411824652443 · Twitter Post
• https://vulncheck.com/advisories/epson-stylus-printer-remote-power-off-dos · Note
• https://epson.eu/en_EU/support/sc/epson-stylus-sx510w/s/s837 · Note