CVE-2018-19232 The web service on Epson WorkForce WF-2861 10.48 LQ22I3(Recovery-mode), WF-2861 10.51.LQ20I6, and WF-2861 10.52.LQ17IA devices allows remote attackers to cause a denial of service via a FIRMWAREUPDATE...
HighCVSS 7.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The web service on Epson WorkForce WF-2861 10.48 LQ22I3(Recovery-mode), WF-2861 10.51.LQ20I6, and WF-2861 10.52.LQ17IA devices allows remote attackers to cause a denial of service via a FIRMWAREUPDATE GET request, as demonstrated by the /DOWN/FIRMWAREUPDATE/ROM1 URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| epson workforce wf-2861 firmware | = 10.48_lq22i3 | No fix listed |
| epson workforce wf-2861 firmware | = 10.51.lq20i6 | No fix listed |
| epson workforce wf-2861 firmware | = 10.52.lq17ia | No fix listed |
References
- github.com exploit third-party-advisory