Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-23572


Cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script. [Note] Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers/network interface via a web browser. According to SEIKO EPSON CORPORATION, it is also called as Remote Manager in some products. Web Config is pre-installed in some printers/network interface provided by SEIKO EPSON CORPORATION. For the details of the affected product names/model numbers, refer to the information provided by the vendor.


Security Impact Summary

This vulnerability carries a MEDIUM severity rating with a CVSS v3.1 score of 4.8, indicating it can be exploited remotely over the network with relatively low complexity though user interaction is required . The vulnerability impacts limited data confidentiality, limited integrity, for affected systems. Impacting 100 products from epson, from epson, from epson and 97 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2023, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.


Published

2023-04-11T09:15:07.707

Last Modified

2025-02-11T16:15:31.730

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.8 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-79
  • Type: Secondary
    CWE-79

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System epson lp-9200ps2_firmware - Yes
Hardware epson lp-9200ps2 - No
Operating System epson lp-9200ps3_firmware - Yes
Hardware epson lp-9200ps3 - No
Operating System epson lp-8200c_firmware - Yes
Hardware epson lp-8200c - No
Operating System epson lp-9600_firmware - Yes
Hardware epson lp-9600 - No
Operating System epson lp-9600s_firmware - Yes
Hardware epson lp-9600s - No
Operating System epson lp-9300_firmware - Yes
Hardware epson lp-9300 - No
Operating System epson lp-8500c_firmware - Yes
Hardware epson lp-8500c - No
Operating System epson lp-8700ps3_firmware - Yes
Hardware epson lp-8700ps3 - No
Operating System epson lp-9800c_firmware - Yes
Hardware epson lp-9800c - No
Operating System epson lp-s5500_firmware - Yes
Hardware epson lp-s5500 - No
Operating System epson lp-9200b_firmware - Yes
Hardware epson lp-9200b - No
Operating System epson lp-9200c_firmware - Yes
Hardware epson lp-9200c - No
Operating System epson lp-s4500_firmware - Yes
Hardware epson lp-s4500 - No
Operating System epson lp-s6500_firmware - Yes
Hardware epson lp-s6500 - No
Operating System epson lp-s7000_firmware - Yes
Hardware epson lp-s7000 - No
Operating System epson lp-s5000_firmware - Yes
Hardware epson lp-s5000 - No
Operating System epson lp-s4000_firmware - Yes
Hardware epson lp-s4000 - No
Operating System epson lp-s6000_firmware - Yes
Hardware epson lp-s6000 - No
Operating System epson lp-s5300_firmware - Yes
Hardware epson lp-s5300 - No
Operating System epson lp-s5300r_firmware - Yes
Hardware epson lp-s5300r - No
Operating System epson lp-s300n_firmware - Yes
Hardware epson lp-s300n - No
Operating System epson lp-s310n_firmware - Yes
Hardware epson lp-s310n - No
Operating System epson lp-s3000_firmware - Yes
Hardware epson lp-s3000 - No
Operating System epson lp-s3000r_firmware - Yes
Hardware epson lp-s3000r - No
Operating System epson lp-s3000z_firmware - Yes
Hardware epson lp-s3000z - No
Operating System epson lp-s3000ps_firmware - Yes
Hardware epson lp-s3000ps - No
Operating System epson lp-s7500_firmware - Yes
Hardware epson lp-s7500 - No
Operating System epson lp-s7500ps_firmware - Yes
Hardware epson lp-s7500ps - No
Operating System epson lp-s3500_firmware - Yes
Hardware epson lp-s3500 - No
Operating System epson lp-s4200_firmware - Yes
Hardware epson lp-s4200 - No
Operating System epson lp-s9000_firmware - Yes
Hardware epson lp-s9000 - No
Operating System epson lp-s7100_firmware - Yes
Hardware epson lp-s7100 - No
Operating System epson lp-s8100_firmware - Yes
Hardware epson lp-s8100 - No
Operating System epson prifnw1_firmware - Yes
Hardware epson prifnw1 - No
Operating System epson prifnw1s_firmware - Yes
Hardware epson prifnw1s - No
Operating System epson prifnw2_firmware - Yes
Hardware epson prifnw2 - No
Operating System epson prifnw2ac_firmware - Yes
Hardware epson prifnw2ac - No
Operating System epson prifnw2s_firmware - Yes
Hardware epson prifnw2s - No
Operating System epson prifnw2sac_firmware - Yes
Hardware epson prifnw2sac - No
Operating System epson prifnw3_firmware - Yes
Hardware epson prifnw3 - No
Operating System epson prifnw3s_firmware - Yes
Hardware epson prifnw3s - No
Operating System epson prifnw6_firmware - Yes
Hardware epson prifnw6 - No
Operating System epson prifnw7_firmware - Yes
Hardware epson prifnw7 - No
Operating System epson prifnw7u_firmware - Yes
Hardware epson prifnw7u - No
Operating System epson prifnw7s_firmware - Yes
Hardware epson prifnw7s - No
Operating System epson pa-w11g_firmware - Yes
Hardware epson pa-w11g - No
Operating System epson pa-w11g2_firmware - Yes
Hardware epson pa-w11g2 - No
Operating System epson esnsb1_firmware - Yes
Hardware epson esnsb1 - No
Operating System epson esnsb2_firmware - Yes
Hardware epson esnsb2 - No
Operating System epson esifnw1_firmware - Yes
Hardware epson esifnw1 - No

References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For epson's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.