An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. POST requests don't require (anti-)CSRF tokens or other mechanisms for validating that the request is from a legitimate source. In addition, CSRF attacks can be used to send text directly to the RAW printer interface. For example, an attack could deliver a worrisome printout to an end user.
Metrics
Affected Vendors & Products
References
History
Fri, 08 Nov 2024 17:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Epson
Epson xp-255 |
|
Weaknesses | CWE-352 | |
CPEs | cpe:2.3:h:epson:xp-255:*:*:*:*:*:*:*:* | |
Vendors & Products |
Epson
Epson xp-255 |
|
Metrics |
cvssV3_1
|
Thu, 07 Nov 2024 20:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. POST requests don't require (anti-)CSRF tokens or other mechanisms for validating that the request is from a legitimate source. In addition, CSRF attacks can be used to send text directly to the RAW printer interface. For example, an attack could deliver a worrisome printout to an end user. | |
References |
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2024-11-07T00:00:00
Updated: 2024-11-08T16:27:17.953Z
Reserved: 2020-02-17T00:00:00
Link: CVE-2019-20460
Vulnrichment
Updated: 2024-11-08T16:21:43.416Z
NVD
Status : Awaiting Analysis
Published: 2024-11-07T21:15:05.300
Modified: 2024-11-08T19:01:03.880
Link: CVE-2019-20460
Redhat
No data.