VulnerabilityPublished 24 Jul 2026

SEIKO EPSON printers and scanners Web Config vulnerable to cross-site request forgery

Source JVN Japan

Severity

Medium

Rated by Threat Radar

Data as of 4 Aug 2026, 13:28 UTC

csrf

What to do

AI-suggested

Until a fix is available, users should limit access to the Web Config interface and avoid interacting with untrusted web content while authenticated to the device.

Description

A cross-site request forgery (CSRF) vulnerability exists in the Web Config interface embedded in multiple SEIKO EPSON printers and scanners. This vulnerability could allow an attacker to perform unauthorized actions on the device's web configuration interface if a user is tricked into submitting a crafted request. No specific affected versions or patch information is provided.

Impact

An attacker could exploit this vulnerability to perform unauthorized configuration changes on affected SEIKO EPSON printers and scanners via the Web Config interface. This could lead to device misconfiguration or disruption of normal operations. There is no information on active exploitation in the wild.

Summary

The Web Config embedded in multiple SEIKO EPSON printers and scanners contains a cross-site request forgery vulnerability. This flaw allows an attacker to induce an authenticated user to submit unauthorized commands to the device's web interface, potentially altering settings without the user's consent.

References

jvn.jp/en/jp/JVN87285119/ (opens in a new tab)

Community reviews

Loading reviews…

What to do

Description

AI analysisMachine-generated, updated 4 Aug 2026, 13:28 UTC

References

Community reviews

Related threats