CVE-2023-23572

Medium

Description

Cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script. [Note] Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers/network interface via a web browser. According to SEIKO EPSON CORPORATION, it is also called as Remote Manager in some products. Web Config is pre-installed in some printers/network interface provided by SEIKO EPSON CORPORATION. For the details of the affected product names/model numbers, refer to the information provided by the vendor.

SeverityMedium
CVSS4.8
Exploit probability—
ProductEpson Lp-9200ps2 Firmware
PublishedApr 11, 2023
First seenApr 11, 2023

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
epson lp-9200ps2_firmwareNo range specified—
epson lp-9200ps3_firmwareNo range specified—
epson lp-8200c_firmwareNo range specified—
epson lp-9600_firmwareNo range specified—
epson lp-9600s_firmwareNo range specified—
epson lp-9300_firmwareNo range specified—
epson lp-8500c_firmwareNo range specified—
epson lp-8700ps3_firmwareNo range specified—
epson lp-9800c_firmwareNo range specified—
epson lp-s5500_firmwareNo range specified—
epson lp-9200b_firmwareNo range specified—
epson lp-9200c_firmwareNo range specified—
epson lp-s4500_firmwareNo range specified—
epson lp-s6500_firmwareNo range specified—
epson lp-s7000_firmwareNo range specified—
epson lp-s5000_firmwareNo range specified—
epson lp-s4000_firmwareNo range specified—
epson lp-s6000_firmwareNo range specified—
epson lp-s5300_firmwareNo range specified—
epson lp-s5300r_firmwareNo range specified—
epson lp-s300n_firmwareNo range specified—
epson lp-s310n_firmwareNo range specified—
epson lp-s3000_firmwareNo range specified—
epson lp-s3000r_firmwareNo range specified—
epson lp-s3000z_firmwareNo range specified—
epson lp-s3000ps_firmwareNo range specified—
epson lp-s7500_firmwareNo range specified—
epson lp-s7500ps_firmwareNo range specified—
epson lp-s3500_firmwareNo range specified—
epson lp-s4200_firmwareNo range specified—
epson lp-s9000_firmwareNo range specified—
epson lp-s7100_firmwareNo range specified—
epson lp-s8100_firmwareNo range specified—
epson prifnw1_firmwareNo range specified—
epson prifnw1s_firmwareNo range specified—
epson prifnw2_firmwareNo range specified—
epson prifnw2ac_firmwareNo range specified—
epson prifnw2s_firmwareNo range specified—
epson prifnw2sac_firmwareNo range specified—
epson prifnw3_firmwareNo range specified—
epson prifnw3s_firmwareNo range specified—
epson prifnw6_firmwareNo range specified—
epson prifnw7_firmwareNo range specified—
epson prifnw7u_firmwareNo range specified—
epson prifnw7s_firmwareNo range specified—
epson pa-w11g_firmwareNo range specified—
epson pa-w11g2_firmwareNo range specified—
epson esnsb1_firmwareNo range specified—
epson esnsb2_firmwareNo range specified—
epson esifnw1_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.