Description
An Authentication Bypass vulnerability exists in EPSON EH-TW5350 EPSON 150075647YWWV110, which could let a remote malicious user cause a Denial of Service via specially crafted series of HTTP..
Published: 2026-08-18
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

An authentication bypass vulnerability exists in the HTTP interface of the Epson EH‑TW5350 network printer, allowing a remote malicious user to send specially crafted HTTP requests. This flaw arises from improper authentication (CWE‑288), and it can cause a denial of service by triggering uncontrolled resource consumption or other disruptive behavior. The primary impact is the loss of authentication integrity, and it can lead to service unavailability for users and administrators.

Affected Systems

The affected device is the Epson EH‑TW5350 3‑color inkjet printer (model code 150075647YWWV110). No additional version information is provided beyond this specific product identifier.

Risk and Exploitability

The EPSS score is < 1% and the vulnerability is not listed in CISA KEV, leaving the exact exploitation probability unknown. The CVSS score 5.3 indicates moderate severity. The flaw stems from improper authentication (CWE‑288), and it enables denial of service via uncontrolled resource consumption. Based on the description, the likely attack vector is remote access through the device’s HTTP management interface. The combination of authentication bypass and potential for denial of service suggests that the risk could be high in environments where the device is exposed to external networks. No public evidence of exploitation is reported at this time.

Generated by OpenCVE AI on August 21, 2026 at 22:25 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the device firmware to the latest Epson release if one is available.
  • Disable or restrict the HTTP management interface to trusted IP addresses only, or remove it entirely if not required.
  • Monitor network traffic and system logs for repeated authentication attempts or abnormal traffic patterns that could indicate an attempted exploitation.

Generated by OpenCVE AI on August 21, 2026 at 22:25 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 21 Aug 2026 22:45:00 +0000

Type Values Removed Values Added
Title Authentication Bypass Leading to Denial of Service in Epson EH‑TW5350 Printer

Fri, 21 Aug 2026 20:45:00 +0000

Type Values Removed Values Added
Title Authentication Bypass and Denial of Service in Epson EH‑TW5350 Network Print Server
Weaknesses CWE-285
CWE-400

Thu, 20 Aug 2026 14:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-288
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Tue, 18 Aug 2026 20:15:00 +0000

Type Values Removed Values Added
Title Authentication Bypass and Denial of Service in Epson EH‑TW5350 Network Print Server
Weaknesses CWE-285
CWE-400

Tue, 18 Aug 2026 18:30:00 +0000

Type Values Removed Values Added
Description An Authentication Bypass vulnerability exists in EPSON EH-TW5350 EPSON 150075647YWWV110, which could let a remote malicious user cause a Denial of Service via specially crafted series of HTTP..
References

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-08-20T13:28:52.721Z

Reserved: 2021-11-15T00:00:00.000Z

Link: CVE-2021-43718

cve-icon Vulnrichment

Updated: 2026-08-20T13:28:39.414Z

cve-icon NVD

Status : Received

Published: 2026-08-18T19:16:42.503

Modified: 2026-08-20T14:17:06.923

Link: CVE-2021-43718

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-21T22:30:17Z

Weaknesses
  • CWE-288

    Authentication Bypass Using an Alternate Path or Channel