Web Config vulnerabilities

2 known vulnerabilities in Web Config from Seiko Epson. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  Web Config: Stack-based Buffer Overflow

  CVE-2025-66635Dec 16, 2025Seiko Epson

  Stack-based buffer overflow vulnerability exists in SEIKO EPSON Web Config. Specially crafted data input by a logged-in user may execute arbitrary code. As for the details of the affected products and versions, see the information provided by the vendor under

• 8.1 High severity

  Web Config: Initialization of a Resource with an Insecure Default

  CVE-2024-47295Oct 1, 2024Seiko Epson

  Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote unauthenticated attacker to set an arbitrary password and operate the device with an administrative privilege. As for the details of the affected versions, see the informat