Vulnerability Description
Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote unauthenticated attacker to set an arbitrary password and operate the device with an administrative privilege. As for the details of the affected versions, see the information provided by the vendor under [References].
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://epson.com/Support/wa00958
- https://jvn.jp/en/vu/JVNVU95133448/
- https://www.epson.jp/support/misc_t/240930_03_oshirase.htm
FAQ
What is CVE-2024-47295?
CVE-2024-47295 is a vulnerability with a CVSS score of 8.1 (HIGH). Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote unauthenticated attacker to set an arbitrary password and operate the device with an administrative privilege. A...
How severe is CVE-2024-47295?
CVE-2024-47295 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-47295?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.