Cross-site request forgery in SEIKO EPSON printers/network interface Web Config



Risk Low
Patch available YES
Number of vulnerabilities 1
CVE-ID CVE-2023-23572
CWE-ID CWE-352
Exploitation vector Network
Public exploit N/A
Vulnerable software
Web Config
Web applications / Other software

LP-9200PS2
Hardware solutions / Office equipment, IP-phones, print servers

LP-9200PS3
Hardware solutions / Office equipment, IP-phones, print servers

LP-8200C
Hardware solutions / Office equipment, IP-phones, print servers

LP-9600
Hardware solutions / Office equipment, IP-phones, print servers

LP-9600S
Hardware solutions / Office equipment, IP-phones, print servers

LP-9300
Hardware solutions / Office equipment, IP-phones, print servers

LP-8500C
Hardware solutions / Office equipment, IP-phones, print servers

LP-3000C
Hardware solutions / Office equipment, IP-phones, print servers

LP-8700PS3
Hardware solutions / Office equipment, IP-phones, print servers

LP-9800C
Hardware solutions / Office equipment, IP-phones, print servers

LP-S5500
Hardware solutions / Office equipment, IP-phones, print servers

LP-9200B
Hardware solutions / Office equipment, IP-phones, print servers

LP-9200C
Hardware solutions / Office equipment, IP-phones, print servers

LP-S4500
Hardware solutions / Office equipment, IP-phones, print servers

LP-S6500
Hardware solutions / Office equipment, IP-phones, print servers

LP-S7000
Hardware solutions / Office equipment, IP-phones, print servers

LP-S5000
Hardware solutions / Office equipment, IP-phones, print servers

LP-S4000
Hardware solutions / Office equipment, IP-phones, print servers

LP-S6000
Hardware solutions / Office equipment, IP-phones, print servers

LP-S5000R
Hardware solutions / Office equipment, IP-phones, print servers

LP-S5000Z
Hardware solutions / Office equipment, IP-phones, print servers

LP-S5000ZR
Hardware solutions / Office equipment, IP-phones, print servers

LP-S5300
Hardware solutions / Office equipment, IP-phones, print servers

LP-S5300R
Hardware solutions / Office equipment, IP-phones, print servers

LP-S300N
Hardware solutions / Office equipment, IP-phones, print servers

LP-S210
Hardware solutions / Office equipment, IP-phones, print servers

LP-S310
Hardware solutions / Office equipment, IP-phones, print servers

LP-S310N
Hardware solutions / Office equipment, IP-phones, print servers

LP-S3000
Hardware solutions / Office equipment, IP-phones, print servers

LP-S3000R
Hardware solutions / Office equipment, IP-phones, print servers

LP-S3000Z
Hardware solutions / Office equipment, IP-phones, print servers

LP-S3000PS
Hardware solutions / Office equipment, IP-phones, print servers

LP-S7500
Hardware solutions / Office equipment, IP-phones, print servers

LP-S7500AS
Hardware solutions / Office equipment, IP-phones, print servers

LP-S7500AH
Hardware solutions / Office equipment, IP-phones, print servers

LP-S7500AP
Hardware solutions / Office equipment, IP-phones, print servers

LP-S3500
Hardware solutions / Office equipment, IP-phones, print servers

LP-S4200
Hardware solutions / Office equipment, IP-phones, print servers

LP-S9000
Hardware solutions / Office equipment, IP-phones, print servers

LP-S7100
Hardware solutions / Office equipment, IP-phones, print servers

LP-S8100
Hardware solutions / Office equipment, IP-phones, print servers

PRIFNW1
Hardware solutions / Office equipment, IP-phones, print servers

PRIFNW1S
Hardware solutions / Office equipment, IP-phones, print servers

PRIFNW2
Hardware solutions / Office equipment, IP-phones, print servers

PRIFNW2AC
Hardware solutions / Office equipment, IP-phones, print servers

PRIFNW2S
Hardware solutions / Office equipment, IP-phones, print servers

PRIFNW2SAC
Hardware solutions / Office equipment, IP-phones, print servers

PRIFNW3
Hardware solutions / Office equipment, IP-phones, print servers

PRIFNW3S
Hardware solutions / Office equipment, IP-phones, print servers

PRIFNW6
Hardware solutions / Office equipment, IP-phones, print servers

PRIFNW7
Hardware solutions / Office equipment, IP-phones, print servers

PRIFNW7U
Hardware solutions / Office equipment, IP-phones, print servers

PRIFNW7S
Hardware solutions / Office equipment, IP-phones, print servers

PA-W11G
Hardware solutions / Office equipment, IP-phones, print servers

PA-11G2
Hardware solutions / Office equipment, IP-phones, print servers

ESNSB1
Hardware solutions / Office equipment, IP-phones, print servers

ESNSB2
Hardware solutions / Office equipment, IP-phones, print servers

ESIFNW1
Hardware solutions / Office equipment, IP-phones, print servers

SC-T3250
Hardware solutions / Office equipment, IP-phones, print servers

SC-T3255
Hardware solutions / Office equipment, IP-phones, print servers

SC-T5250
Hardware solutions / Office equipment, IP-phones, print servers

SC-T5255
Hardware solutions / Office equipment, IP-phones, print servers

SC-T7250
Hardware solutions / Office equipment, IP-phones, print servers

SC-T7255
Hardware solutions / Office equipment, IP-phones, print servers

SC-T5250D
Hardware solutions / Office equipment, IP-phones, print servers

SC-T5255D
Hardware solutions / Office equipment, IP-phones, print servers

SC-T7250D
Hardware solutions / Office equipment, IP-phones, print servers

SC-T7255D
Hardware solutions / Office equipment, IP-phones, print servers

SC-P5050
Hardware solutions / Office equipment, IP-phones, print servers

SC-P7050
Hardware solutions / Office equipment, IP-phones, print servers

SC-P9050
Hardware solutions / Office equipment, IP-phones, print servers

SC-P6050
Hardware solutions / Office equipment, IP-phones, print servers

SC-P8050
Hardware solutions / Office equipment, IP-phones, print servers

SC-P20050
Hardware solutions / Office equipment, IP-phones, print servers

SC-S80650
Hardware solutions / Office equipment, IP-phones, print servers

SC-S60650
Hardware solutions / Office equipment, IP-phones, print servers

SC-S40650
Hardware solutions / Office equipment, IP-phones, print servers

SC-S60650L
Hardware solutions / Office equipment, IP-phones, print servers

SC-S80650L
Hardware solutions / Office equipment, IP-phones, print servers

SC-F7200
Hardware solutions / Office equipment, IP-phones, print servers

SC-F6350
Hardware solutions / Office equipment, IP-phones, print servers

SC-F9450
Hardware solutions / Office equipment, IP-phones, print servers

SC-F9450H
Hardware solutions / Office equipment, IP-phones, print servers

SC-F2150
Hardware solutions / Office equipment, IP-phones, print servers

TM-C7500
Hardware solutions / Office equipment, IP-phones, print servers

TM-C3500
Hardware solutions / Office equipment, IP-phones, print servers

TM-C3400
Hardware solutions / Office equipment, IP-phones, print servers

PX-B510
Hardware solutions / Office equipment, IP-phones, print servers

PX-B500
Hardware solutions / Office equipment, IP-phones, print servers

PX-5800
Hardware solutions / Office equipment, IP-phones, print servers

PX-5002
Hardware solutions / Office equipment, IP-phones, print servers

PX-5V
Hardware solutions / Office equipment, IP-phones, print servers

PX-7V
Hardware solutions / Office equipment, IP-phones, print servers

SC-PX7V2
Hardware solutions / Office equipment, IP-phones, print servers

SC-PX5V2
Hardware solutions / Office equipment, IP-phones, print servers

SC-PX3V
Hardware solutions / Office equipment, IP-phones, print servers

PX-6250S
Hardware solutions / Office equipment, IP-phones, print servers

PX-6550
Hardware solutions / Office equipment, IP-phones, print servers

PX-7500N
Hardware solutions / Office equipment, IP-phones, print servers

PX-7550
Hardware solutions / Office equipment, IP-phones, print servers

PX-7550S
Hardware solutions / Office equipment, IP-phones, print servers

PX-9500N
Hardware solutions / Office equipment, IP-phones, print servers

PX-9550
Hardware solutions / Office equipment, IP-phones, print servers

PX-9550S
Hardware solutions / Office equipment, IP-phones, print servers

PX-20000
Hardware solutions / Office equipment, IP-phones, print servers

STYLUS PRO GS6000
Hardware solutions / Office equipment, IP-phones, print servers

PX-W8000
Hardware solutions / Office equipment, IP-phones, print servers

PX-F8000
Hardware solutions / Office equipment, IP-phones, print servers

PX-F8000M
Hardware solutions / Office equipment, IP-phones, print servers

PX-F10000
Hardware solutions / Office equipment, IP-phones, print servers

PX-H6000
Hardware solutions / Office equipment, IP-phones, print servers

PX-H7000
Hardware solutions / Office equipment, IP-phones, print servers

PX-H8000
Hardware solutions / Office equipment, IP-phones, print servers

PX-H9000
Hardware solutions / Office equipment, IP-phones, print servers

PX-H10000
Hardware solutions / Office equipment, IP-phones, print servers

SC-T3050
Hardware solutions / Office equipment, IP-phones, print servers

SC-T5050
Hardware solutions / Office equipment, IP-phones, print servers

SC-T7050
Hardware solutions / Office equipment, IP-phones, print servers

SC-P10050
Hardware solutions / Office equipment, IP-phones, print servers

SC-S30650
Hardware solutions / Office equipment, IP-phones, print servers

SC-S50650
Hardware solutions / Office equipment, IP-phones, print servers

SC-S70650
Hardware solutions / Office equipment, IP-phones, print servers

SC-F6000
Hardware solutions / Office equipment, IP-phones, print servers

SC-F7000
Hardware solutions / Office equipment, IP-phones, print servers

SC-F7100
Hardware solutions / Office equipment, IP-phones, print servers

SC-F6200
Hardware solutions / Office equipment, IP-phones, print servers

SC-F9200
Hardware solutions / Office equipment, IP-phones, print servers

SC-F9350
Hardware solutions / Office equipment, IP-phones, print servers

SC-F2000
Hardware solutions / Office equipment, IP-phones, print servers

Vendor Seiko Epson Corporation

Security Bulletin

This security bulletin contains one low risk vulnerability.

1) Cross-site request forgery

EUVDB-ID: #VU73150

Risk: Low

CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-23572

CWE-ID: CWE-352 - Cross-Site Request Forgery (CSRF)

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform cross-site request forgery attacks.

The vulnerability exists due to insufficient validation of the HTTP request origin. A remote attacker can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Web Config: All versions

LP-9200PS2: All versions

LP-9200PS3: All versions

LP-8200C: All versions

LP-9600: All versions

LP-9600S: All versions

LP-9300: All versions

LP-8500C: All versions

LP-3000C: All versions

LP-8700PS3: All versions

LP-9800C: All versions

LP-S5500: All versions

LP-9200B: All versions

LP-9200C: All versions

LP-S4500: All versions

LP-S6500: All versions

LP-S7000: All versions

LP-S5000: All versions

LP-S4000: All versions

LP-S6000: All versions

LP-S5000R: All versions

LP-S5000Z: All versions

LP-S5000ZR: All versions

LP-S5300: All versions

LP-S5300R: All versions

LP-S300N: All versions

LP-S210: All versions

LP-S310: All versions

LP-S310N: All versions

LP-S3000: All versions

LP-S3000R: All versions

LP-S3000Z: All versions

LP-S3000PS: All versions

LP-S7500: All versions

LP-S7500AS: All versions

LP-S7500AH: All versions

LP-S7500AP: All versions

LP-S3500: All versions

LP-S4200: All versions

LP-S9000: All versions

LP-S7100: All versions

LP-S8100: All versions

PRIFNW1: All versions

PRIFNW1S: All versions

PRIFNW2: All versions

PRIFNW2AC: All versions

PRIFNW2S: All versions

PRIFNW2SAC: All versions

PRIFNW3: All versions

PRIFNW3S: All versions

PRIFNW6: All versions

PRIFNW7: All versions

PRIFNW7U: All versions

PRIFNW7S: All versions

PA-W11G: All versions

PA-11G2: All versions

ESNSB1: All versions

ESNSB2: All versions

ESIFNW1: All versions

SC-T3250: All versions

SC-T3255: All versions

SC-T5250: All versions

SC-T5255: All versions

SC-T7250: All versions

SC-T7255: All versions

SC-T5250D: All versions

SC-T5255D: All versions

SC-T7250D: All versions

SC-T7255D: All versions

SC-P5050: All versions

SC-P7050: All versions

SC-P9050: All versions

SC-P6050: All versions

SC-P8050: All versions

SC-P20050: All versions

SC-S80650: All versions

SC-S60650: All versions

SC-S40650: All versions

SC-S60650L: All versions

SC-S80650L: All versions

SC-F7200: All versions

SC-F6350: All versions

SC-F9450: All versions

SC-F9450H: All versions

SC-F2150: All versions

TM-C7500: All versions

TM-C3500: All versions

TM-C3400: All versions

PX-B510: All versions

PX-B500: All versions

PX-5800: All versions

PX-5002: All versions

PX-5V: All versions

PX-7V: All versions

SC-PX7V2: All versions

SC-PX5V2: All versions

SC-PX3V: All versions

PX-6250S: All versions

PX-6550: All versions

PX-7500N: All versions

PX-7550: All versions

PX-7550S: All versions

PX-9500N: All versions

PX-9550: All versions

PX-9550S: All versions

PX-20000: All versions

STYLUS PRO GS6000: All versions

PX-W8000: All versions

PX-F8000: All versions

PX-F8000M: All versions

PX-F10000: All versions

PX-H6000: All versions

PX-H7000: All versions

PX-H8000: All versions

PX-H9000: All versions

PX-H10000: All versions

SC-T3050: All versions

SC-T5050: All versions

SC-T7050: All versions

SC-P10050: All versions

SC-S30650: All versions

SC-S50650: All versions

SC-S70650: All versions

SC-F6000: All versions

SC-F7000: All versions

SC-F7100: All versions

SC-F6200: All versions

SC-F9200: All versions

SC-F9350: All versions

SC-F2000: All versions

CPE2.3 External links

https://jvn.jp/en/jp/JVN82424996/index.html
https://www.epson.jp/support/misc_t/230308_oshirase.htm


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###