JVNDB-2018-000128
Vulnerability from jvndb - Published: 2018-12-06 07:19 - Updated:2019-09-27 00:55
Severity
Summary
Multiple vulnerabilities in multiple SEIKO EPSON printers and scanners
Details
Multiple printers and scanners provided by SEIKO EPSON CORPORATION contain multiple vulnerabilities listed below.
* Open Redirect (CWE-601) - CVE-2018-0688
* HTTP header injection (CWE-113) - CVE-2018-0689
Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
Impacted products
| Vendor | Product | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2018/JVNDB-2018-000128.html",
"dc:date": "2019-09-27T09:55+09:00",
"dcterms:issued": "2018-12-06T16:19+09:00",
"dcterms:modified": "2019-09-27T09:55+09:00",
"description": "Multiple printers and scanners provided by SEIKO EPSON CORPORATION contain multiple vulnerabilities listed below.\r\n* Open Redirect (CWE-601) - CVE-2018-0688\r\n* HTTP header injection (CWE-113) - CVE-2018-0689\r\n\r\nToshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
"link": "https://jvndb.jvn.jp/en/contents/2018/JVNDB-2018-000128.html",
"sec:cpe": [
{
"#text": "cpe:/a:epson:ds-570w",
"@product": "DS-570W",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:ds-780n",
"@product": "DS-780N",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:ep-10va",
"@product": "EP-10VA",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:ep-30va",
"@product": "EP-30VA",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:ep-707a",
"@product": "EP-707A",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:ep-708a",
"@product": "EP-708A",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:ep-709a",
"@product": "EP-709A",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:ep-777a",
"@product": "EP-777A",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:ep-807ab_aw_ar",
"@product": "EP-807AB/AW/AR",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:ep-808ab_aw_ar",
"@product": "EP-808AB/AW/AR",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:ep-879ab_aw_ar",
"@product": "EP-879AB/AW/AR",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:ep-907f",
"@product": "EP-907F",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:ep-977a3",
"@product": "EP-977A3",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:ep-978a3",
"@product": "EP-978A3",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:ep-979a3",
"@product": "EP-979A3",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:ep-m570t",
"@product": "EP-M570T",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:ew-m5071ft",
"@product": "EW-M5071FT",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:ew-m660ft",
"@product": "EW-M660FT",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:ew-m770t",
"@product": "EW-M770T",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:pf-70",
"@product": "PF-70",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:pf-71",
"@product": "PF-71",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:pf-81",
"@product": "PF-81",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-048a",
"@product": "PX-048A",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-049a",
"@product": "PX-049A",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-437a",
"@product": "PX-437A",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-m350f",
"@product": "PX-M350F",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-m5040f",
"@product": "PX-M5040F",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-m5041f",
"@product": "PX-M5041F",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-m650a",
"@product": "PX-M650A",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-m650f",
"@product": "PX-M650F",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-m680f",
"@product": "PX-M680F",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-m7050f",
"@product": "PX-M7050F",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-m7050fp",
"@product": "PX-M7050FP",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-m7050fx",
"@product": "PX-M7050FX",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-m7070fx",
"@product": "PX-M7070FX",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-m740f",
"@product": "PX-M740F",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-m741f",
"@product": "PX-M741F",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-m780f",
"@product": "PX-M780F",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-m781f",
"@product": "PX-M781F",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-m840f",
"@product": "PX-M840F",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-m840fx",
"@product": "PX-M840FX",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-m860f",
"@product": "PX-M860F",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-s05b_w",
"@product": "PX-S05B/W",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-s350",
"@product": "PX-S350",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-s5040",
"@product": "PX-S5040",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-s7050",
"@product": "PX-S7050",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-s7050ps",
"@product": "PX-S7050PS",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-s7050x",
"@product": "PX-S7050X",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-s7070x",
"@product": "PX-S7070X",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-s740",
"@product": "PX-S740",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-s840",
"@product": "PX-S840",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-s840x",
"@product": "PX-S840X",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:epson:px-s860",
"@product": "PX-S860",
"@vendor": "SEIKO EPSON CORPORATION",
"@version": "2.2"
}
],
"sec:cvss": [
{
"@score": "4.3",
"@severity": "Medium",
"@type": "Base",
"@vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"@version": "2.0"
},
{
"@score": "4.7",
"@severity": "Medium",
"@type": "Base",
"@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
"@version": "3.0"
}
],
"sec:identifier": "JVNDB-2018-000128",
"sec:references": [
{
"#text": "https://jvn.jp/en/jp/JVN89767228/index.html",
"@id": "JVN#89767228",
"@source": "JVN"
},
{
"#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0688",
"@id": "CVE-2018-0688",
"@source": "CVE"
},
{
"#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0689",
"@id": "CVE-2018-0689",
"@source": "CVE"
},
{
"#text": "https://nvd.nist.gov/vuln/detail/CVE-2018-0688",
"@id": "CVE-2018-0688",
"@source": "NVD"
},
{
"#text": "https://nvd.nist.gov/vuln/detail/CVE-2018-0689",
"@id": "CVE-2018-0689",
"@source": "NVD"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-20",
"@title": "Improper Input Validation(CWE-20)"
}
],
"title": "Multiple vulnerabilities in multiple SEIKO EPSON printers and scanners"
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…