Vulnerabilities > Epson > Epson Workforce WF 2861 Firmware > Critical

DATE CVE VULNERABILITY TITLE RISK
2018-12-24 CVE-2018-19248 Missing Authentication for Critical Function vulnerability in Epson Workforce Wf-2861 Firmware 10.48Lq22I3/10.51.Lq20I6/10.52.Lq17Ia
The web service on Epson WorkForce WF-2861 10.48 LQ22I3(Recovery-mode), WF-2861 10.51.LQ20I6, and WF-2861 10.52.LQ17IA devices allows remote attackers to upload a firmware file and reset the printer without authentication by making a request to the /DOWN/FIRMWAREUPDATE/ROM1 URI and a POST request to the /FIRMWAREUPDATE URI.
network
low complexity
epson CWE-306
critical
 9.1
9.1