Seiko Epson vulnerabilities
We track 7 vulnerabilities in Seiko Epson products across 7 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on March 5, 2026.
Latest Seiko Epson vulnerabilities
- 9.8 Critical severity
ESC/POS: Missing Authentication for Critical Functionality
ESC/POS, a printer control language designed by Seiko Epson Corporation, lacks mechanisms for user authentication and command authorization, does not provide controls to restrict sources or destinations of network communication, and transmits commands without
- 8.6 High severity
Web Config: Stack-based Buffer Overflow
Stack-based buffer overflow vulnerability exists in SEIKO EPSON Web Config. Specially crafted data input by a logged-in user may execute arbitrary code. As for the details of the affected products and versions, see the information provided by the vendor under
- 9.8 Critical severity
EPSON WebConfig for SEIKO EPSON Projector…: Improper Restriction of Excessive Authentication Attempts
EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts. An administrative user's password may be identified through a brute force attack.
- 8.7 High severity
Epson Stylus SX510W: Uncontrolled Resource Consumption
The Epson Stylus SX510W embedded web management service fails to properly handle consecutive ampersand characters in query parameters when accessing /PRESENTATION/HTML/TOP/INDEX.HTML. A remote attacker can send a malformed request that triggers improper input
- 7.5 High severity
Multiple EPSON product: Use of Weak Credentials
On multiple products of SEIKO EPSON and FUJIFILM Corporation, the initial administrator password is easy to guess from the information available via SNMP. If the administrator password is not changed from the initial one, a remote attacker with SNMP access can
- 7.8 High severity
SEIKO EPSON printer drivers for Windows OS: Incorrect Default Permissions
Multiple SEIKO EPSON printer drivers for Windows OS are configured with an improper access permission settings when installed or used in a language other than English. If a user is directed to place a crafted DLL file in a location of an attacker's choosing, t
- 8.1 High severity
Web Config: Initialization of a Resource with an Insecure Default
Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote unauthenticated attacker to set an arbitrary password and operate the device with an administrative privilege. As for the details of the affected versions, see the informat