Impact
A buffer overflow exists in the RAW Printing Service (JetDirect) of EPSON L14150 FL27PB printers. The flaw allows an attacker to send a specially crafted packet over TCP port 9100, causing the printer firmware to execute arbitrary code; based on the description, it is inferred that the attacker may gain full system privileges, potentially compromising network security and data confidentiality.
Affected Systems
EPSON L14150 FL27PB printers running the default firmware that supports the RAW Printing Service on port 9100 are impacted. No additional version details are publicly available, so all units with this service enabled are considered vulnerable.
Risk and Exploitability
The vulnerability can be triggered remotely, but it is not stated whether authentication is required; based on the description, it is inferred that the attacker may not need credentials. The CVSS score is 7.5, indicating high severity, while the EPSS score is unavailable and the vulnerability is not listed in the KEV catalog. Exploitation would require network access to the printer’s port 9100 and can lead to compromise of the device and the surrounding network.
OpenCVE Enrichment