CVE-2018-14900: epson wf-2750_firmware Communication Channel Errors

Vulnerability summary

CVE-2018-14900 is a high (CVSS 7.5) Communication Channel Errors vulnerability in epson wf-2750_firmware. EPSS estimates a 1.11% chance of exploitation in the next 30 days, higher than 65.4% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 30-08-2018
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

On EPSON WF-2750 printers with firmware JP02I2, there is no filtering of print jobs. Remote attackers can send print jobs directly to the printer via TCP port 9100.

• CWE-417Communication Channel ErrorsWeaknesses in this category are related to improper handling of communication channels and access paths. These weaknesses include problems in creating, managing, or removing alternate channels and alternate paths. Some of these can overlap virtual file problems and are commonly used in "bypass" attacks, such as those that exploit authentication errors.