Impact
An authentication bypass vulnerability exists in the HTTP interface of the Epson EH‑TW5350 network printer, allowing a remote malicious user to send specially crafted HTTP requests. This flaw arises from improper authentication (CWE‑288), and it can cause a denial of service by triggering uncontrolled resource consumption or other disruptive behavior. The primary impact is the loss of authentication integrity, and it can lead to service unavailability for users and administrators.
Affected Systems
The affected device is the Epson EH‑TW5350 3‑color inkjet printer (model code 150075647YWWV110). No additional version information is provided beyond this specific product identifier.
Risk and Exploitability
The EPSS score is < 1% and the vulnerability is not listed in CISA KEV, leaving the exact exploitation probability unknown. The CVSS score 5.3 indicates moderate severity. The flaw stems from improper authentication (CWE‑288), and it enables denial of service via uncontrolled resource consumption. Based on the description, the likely attack vector is remote access through the device’s HTTP management interface. The combination of authentication bypass and potential for denial of service suggests that the risk could be high in environments where the device is exposed to external networks. No public evidence of exploitation is reported at this time.
OpenCVE Enrichment