{"id":"CVE-2023-23572","aliases":["EUVD-2023-27672","GHSA-78m5-76hf-68gx"],"status":"published","title":"Cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a...","description":"Cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script. [Note] Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers/network interface via a web browser. According to SEIKO EPSON CORPORATION, it is also called as Remote Manager in some products. Web Config is pre-installed in some printers/network interface provided by SEIKO EPSON CORPORATION. For the details of the affected product names/model numbers, refer to the information provided by the vendor.","severity":{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00499,"percentile":0.43298,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352","CWE-79"],"published":"2023-04-11T00:00:00Z","modified":"2026-06-17T05:37:28Z","products":[{"vendor":"epson","product":"esifnw1_firmware"},{"vendor":"epson","product":"esnsb1_firmware"},{"vendor":"epson","product":"esnsb2_firmware"},{"vendor":"epson","product":"lp-8200c_firmware"},{"vendor":"epson","product":"lp-8500c_firmware"},{"vendor":"epson","product":"lp-8700ps3_firmware"},{"vendor":"epson","product":"lp-9200b_firmware"},{"vendor":"epson","product":"lp-9200c_firmware"},{"vendor":"epson","product":"lp-9200ps2_firmware"},{"vendor":"epson","product":"lp-9200ps3_firmware"},{"vendor":"epson","product":"lp-9300_firmware"},{"vendor":"epson","product":"lp-9600_firmware"},{"vendor":"epson","product":"lp-9600s_firmware"},{"vendor":"epson","product":"lp-9800c_firmware"},{"vendor":"epson","product":"lp-s3000_firmware"},{"vendor":"epson","product":"lp-s3000ps_firmware"},{"vendor":"epson","product":"lp-s3000r_firmware"},{"vendor":"epson","product":"lp-s3000z_firmware"},{"vendor":"epson","product":"lp-s300n_firmware"},{"vendor":"epson","product":"lp-s310n_firmware"},{"vendor":"epson","product":"lp-s3500_firmware"},{"vendor":"epson","product":"lp-s4000_firmware"},{"vendor":"epson","product":"lp-s4200_firmware"},{"vendor":"epson","product":"lp-s4500_firmware"},{"vendor":"epson","product":"lp-s5000_firmware"},{"vendor":"epson","product":"lp-s5300_firmware"},{"vendor":"epson","product":"lp-s5300r_firmware"},{"vendor":"epson","product":"lp-s5500_firmware"},{"vendor":"epson","product":"lp-s6000_firmware"},{"vendor":"epson","product":"lp-s6500_firmware"},{"vendor":"epson","product":"lp-s7000_firmware"},{"vendor":"epson","product":"lp-s7100_firmware"},{"vendor":"epson","product":"lp-s7500_firmware"},{"vendor":"epson","product":"lp-s7500ps_firmware"},{"vendor":"epson","product":"lp-s8100_firmware"},{"vendor":"epson","product":"lp-s9000_firmware"},{"vendor":"epson","product":"pa-w11g2_firmware"},{"vendor":"epson","product":"pa-w11g_firmware"},{"vendor":"epson","product":"prifnw1_firmware"},{"vendor":"epson","product":"prifnw1s_firmware"},{"vendor":"epson","product":"prifnw2_firmware"},{"vendor":"epson","product":"prifnw2ac_firmware"},{"vendor":"epson","product":"prifnw2s_firmware"},{"vendor":"epson","product":"prifnw2sac_firmware"},{"vendor":"epson","product":"prifnw3_firmware"},{"vendor":"epson","product":"prifnw3s_firmware"},{"vendor":"epson","product":"prifnw6_firmware"},{"vendor":"epson","product":"prifnw7_firmware"},{"vendor":"epson","product":"prifnw7s_firmware"},{"vendor":"epson","product":"prifnw7u_firmware"},{"vendor":"seiko epson corporation","product":"seiko epson printers/network interface web config"}],"references":[{"url":"https://www.epson.jp/support/misc_t/230308_oshirase.htm","tags":["x_transferred","Mitigation","Vendor Advisory"]},{"url":"https://jvn.jp/en/jp/JVN82424996/","tags":["x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-23572"},{"url":"https://jvn.jp/en/jp/JVN82424996"},{"url":"https://github.com/advisories/GHSA-78m5-76hf-68gx"}],"sources":{"cve":[{"id":"CVE-2023-23572","description":"Cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script. [Note] Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers/network interface via a web browser. According to SEIKO EPSON CORPORATION, it is also called as Remote Manager in some products. Web Config is pre-installed in some printers/network interface provided by SEIKO EPSON CORPORATION. For the details of the affected product names/model numbers, refer to the information provided by the vendor.","status":"published","published":"2023-04-11T00:00:00Z","modified":"2025-02-11T15:51:26.574Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:35:21.232549Z"}],"euvd":[{"id":"EUVD-2023-27672","description":"Cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script. [Note] Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers/network interface via a web browser. According to SEIKO EPSON CORPORATION, it is also called as Remote Manager in some products. Web Config is pre-installed in some printers/network interface provided by SEIKO EPSON CORPORATION. For the details of the affected product names/model numbers, refer to the information provided by the vendor.","status":"published","published":"2023-04-11T00:00:00Z","modified":"2025-02-11T15:51:26Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T00:03:59.282543Z"}],"ghsa":[{"id":"GHSA-78m5-76hf-68gx","title":"Cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a...","description":"Cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script. [Note] Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers/network interface via a web browser. According to SEIKO EPSON CORPORATION, it is also called as Remote Manager in some products. Web Config is pre-installed in some printers/network interface provided by SEIKO EPSON CORPORATION. For the details of the affected product names/model numbers, refer to the information provided by the vendor.","status":"published","published":"2023-04-11T09:30:24Z","modified":"2024-04-04T03:24:02Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-79","CWE-352"],"updated_at":"2026-11-02T14:56:14.332077Z"}],"nvd":[{"id":"CVE-2023-23572","description":"Cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script. [Note] Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers/network interface via a web browser. According to SEIKO EPSON CORPORATION, it is also called as Remote Manager in some products. Web Config is pre-installed in some printers/network interface provided by SEIKO EPSON CORPORATION. For the details of the affected product names/model numbers, refer to the information provided by the vendor.","status":"published","published":"2023-04-11T09:15:07.707Z","modified":"2026-06-17T05:37:28.55Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:07:53.719171Z"}]}}