CVE-2024-47295CWE-1188

Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote unauthenticated attacker to set an arbitrary password and operate the…

High · published October 1, 2024

CVSS v3.0
8.1
EPSS
1%
Percentile
56.5
In the wild
Unconfirmed
What it is

Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote unauthenticated attacker to set an arbitrary password and operate the device with an administrative privilege. As for the details of the affected versions, see the information provided by the vendor under [References].

The record
Technical detail
CVSS v3.0
8.1 · HIGH
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00811 · 56.5th percentile
Weakness
CWE-1188 · Initialization of a Resource with an Insecure Default
Published
2024-10-01T03:16Z
EPSS history
Timeline
  • 01 OCT 03:16Z
    Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote unauthenticated attacker to set an arbitrary password and operate the…
    cvelistv5