{"id":"CVE-2023-27520","aliases":["EUVD-2023-31282","GHSA-rjmj-fvvx-96gg"],"status":"published","title":"Cross-site request forgery (CSRF) vulnerability in SEIKO EPSON printers/network interface Web...","description":"Cross-site request forgery (CSRF) vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote unauthenticated attacker to hijack the authentication and perform unintended operations by having a logged-in user view a malicious page. [Note] Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers/network interface via a web browser. According to SEIKO EPSON CORPORATION, it is also called as Remote Manager in some products. Web Config is pre-installed in some printers/network interface provided by SEIKO EPSON CORPORATION. For the details of the affected product names/model numbers, refer to the information provided by the vendor.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00314,"percentile":0.24526,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352","CWE-79"],"published":"2023-04-11T00:00:00Z","modified":"2026-06-17T05:45:23Z","products":[{"vendor":"epson","product":"esifnw1_firmware"},{"vendor":"epson","product":"esnsb1_firmware"},{"vendor":"epson","product":"esnsb2_firmware"},{"vendor":"epson","product":"lp-8200c_firmware"},{"vendor":"epson","product":"lp-8500c_firmware"},{"vendor":"epson","product":"lp-8700ps3_firmware"},{"vendor":"epson","product":"lp-9200b_firmware"},{"vendor":"epson","product":"lp-9200c_firmware"},{"vendor":"epson","product":"lp-9200ps2_firmware"},{"vendor":"epson","product":"lp-9200ps3_firmware"},{"vendor":"epson","product":"lp-9300_firmware"},{"vendor":"epson","product":"lp-9600_firmware"},{"vendor":"epson","product":"lp-9600s_firmware"},{"vendor":"epson","product":"lp-9800c_firmware"},{"vendor":"epson","product":"lp-s3000_firmware"},{"vendor":"epson","product":"lp-s3000ps_firmware"},{"vendor":"epson","product":"lp-s3000r_firmware"},{"vendor":"epson","product":"lp-s3000z_firmware"},{"vendor":"epson","product":"lp-s300n_firmware"},{"vendor":"epson","product":"lp-s310n_firmware"},{"vendor":"epson","product":"lp-s3500_firmware"},{"vendor":"epson","product":"lp-s4000_firmware"},{"vendor":"epson","product":"lp-s4200_firmware"},{"vendor":"epson","product":"lp-s4500_firmware"},{"vendor":"epson","product":"lp-s5000_firmware"},{"vendor":"epson","product":"lp-s5300_firmware"},{"vendor":"epson","product":"lp-s5300r_firmware"},{"vendor":"epson","product":"lp-s5500_firmware"},{"vendor":"epson","product":"lp-s6000_firmware"},{"vendor":"epson","product":"lp-s6500_firmware"},{"vendor":"epson","product":"lp-s7000_firmware"},{"vendor":"epson","product":"lp-s7100_firmware"},{"vendor":"epson","product":"lp-s7500_firmware"},{"vendor":"epson","product":"lp-s7500ps_firmware"},{"vendor":"epson","product":"lp-s8100_firmware"},{"vendor":"epson","product":"lp-s9000_firmware"},{"vendor":"epson","product":"pa-w11g2_firmware"},{"vendor":"epson","product":"pa-w11g_firmware"},{"vendor":"epson","product":"prifnw1_firmware"},{"vendor":"epson","product":"prifnw1s_firmware"},{"vendor":"epson","product":"prifnw2_firmware"},{"vendor":"epson","product":"prifnw2ac_firmware"},{"vendor":"epson","product":"prifnw2s_firmware"},{"vendor":"epson","product":"prifnw2sac_firmware"},{"vendor":"epson","product":"prifnw3_firmware"},{"vendor":"epson","product":"prifnw3s_firmware"},{"vendor":"epson","product":"prifnw6_firmware"},{"vendor":"epson","product":"prifnw7_firmware"},{"vendor":"epson","product":"prifnw7s_firmware"},{"vendor":"epson","product":"prifnw7u_firmware"},{"vendor":"epson","product":"px-20000_firmware"},{"vendor":"epson","product":"px-5002_firmware"},{"vendor":"epson","product":"px-5800_firmware"},{"vendor":"epson","product":"px-5v_firmware"},{"vendor":"epson","product":"px-6250s_firmware"},{"vendor":"epson","product":"px-6550_firmware"},{"vendor":"epson","product":"px-7500n_firmware"},{"vendor":"epson","product":"px-7550_firmware"},{"vendor":"epson","product":"px-7550s_firmware"},{"vendor":"epson","product":"px-7v_firmware"},{"vendor":"epson","product":"px-9500n_firmware"},{"vendor":"epson","product":"px-9550_firmware"},{"vendor":"epson","product":"px-9550s_firmware"},{"vendor":"epson","product":"px-b500_firmware"},{"vendor":"epson","product":"px-b510_firmware"},{"vendor":"epson","product":"px-f10000_firmware"},{"vendor":"epson","product":"px-f8000_firmware"},{"vendor":"epson","product":"px-f8000m_firmware"},{"vendor":"epson","product":"px-h10000_firmware"},{"vendor":"epson","product":"px-h6000_firmware"},{"vendor":"epson","product":"px-h7000_firmware"},{"vendor":"epson","product":"px-h8000_firmware"},{"vendor":"epson","product":"px-h9000_firmware"},{"vendor":"epson","product":"px-w8000_firmware"},{"vendor":"epson","product":"sc-f2000_firmware"},{"vendor":"epson","product":"sc-f2150_firmware"},{"vendor":"epson","product":"sc-f6000_firmware"},{"vendor":"epson","product":"sc-f6200_firmware"},{"vendor":"epson","product":"sc-f6350_firmware"},{"vendor":"epson","product":"sc-f7100_firmware"},{"vendor":"epson","product":"sc-f7200_firmware"},{"vendor":"epson","product":"sc-f9200_firmware"},{"vendor":"epson","product":"sc-f9350_firmware"},{"vendor":"epson","product":"sc-f9450_firmware"},{"vendor":"epson","product":"sc-f9450h_firmware"},{"vendor":"epson","product":"sc-p10050_firmware"},{"vendor":"epson","product":"sc-p20050_firmware"},{"vendor":"epson","product":"sc-p5050_firmware"},{"vendor":"epson","product":"sc-p6050_firmware"},{"vendor":"epson","product":"sc-p7050_firmware"},{"vendor":"epson","product":"sc-p8050_firmware"},{"vendor":"epson","product":"sc-p9050_firmware"},{"vendor":"epson","product":"sc-px3v_firmware"},{"vendor":"epson","product":"sc-px5v2_firmware"},{"vendor":"epson","product":"sc-px7v2_firmware"},{"vendor":"epson","product":"sc-s30650_firmware"},{"vendor":"epson","product":"sc-s40650_firmware"},{"vendor":"epson","product":"sc-s50650_firmware"},{"vendor":"epson","product":"sc-s60650_firmware"},{"vendor":"epson","product":"sc-s60650l_firmware"},{"vendor":"epson","product":"sc-s70650_firmware"},{"vendor":"epson","product":"sc-s80650_firmware"},{"vendor":"epson","product":"sc-s80650l_firmware"},{"vendor":"epson","product":"sc-t3050_firmware"},{"vendor":"epson","product":"sc-t3250_firmware"},{"vendor":"epson","product":"sc-t3255_firmware"},{"vendor":"epson","product":"sc-t5050_firmware"},{"vendor":"epson","product":"sc-t5250_firmware"},{"vendor":"epson","product":"sc-t5250d_firmware"},{"vendor":"epson","product":"sc-t5255_firmware"},{"vendor":"epson","product":"sc-t5255d_firmware"},{"vendor":"epson","product":"sc-t7050_firmware"},{"vendor":"epson","product":"sc-t7250_firmware"},{"vendor":"epson","product":"sc-t7250d_firmware"},{"vendor":"epson","product":"sc-t7255_firmware"},{"vendor":"epson","product":"sc-t7255d_firmware"},{"vendor":"epson","product":"stylus_pro_gs6000_firmware"},{"vendor":"epson","product":"tm-c3400_firmware"},{"vendor":"epson","product":"tm-c3500_firmware"},{"vendor":"epson","product":"tm-c7500_firmware"},{"vendor":"seiko epson corporation","product":"seiko epson printers/network interface web config"}],"references":[{"url":"https://www.epson.jp/support/misc_t/230308_oshirase.htm","tags":["x_transferred","Mitigation","Vendor Advisory"]},{"url":"https://jvn.jp/en/jp/JVN82424996/","tags":["x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-27520"},{"url":"https://jvn.jp/en/jp/JVN82424996"},{"url":"https://github.com/advisories/GHSA-rjmj-fvvx-96gg"}],"sources":{"cve":[{"id":"CVE-2023-27520","description":"Cross-site request forgery (CSRF) vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote unauthenticated attacker to hijack the authentication and perform unintended operations by having a logged-in user view a malicious page. [Note] Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers/network interface via a web browser. According to SEIKO EPSON CORPORATION, it is also called as Remote Manager in some products. Web Config is pre-installed in some printers/network interface provided by SEIKO EPSON CORPORATION. For the details of the affected product names/model numbers, refer to the information provided by the vendor.","status":"published","published":"2023-04-11T00:00:00Z","modified":"2025-02-10T21:27:09.702Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:35:26.261013Z"}],"euvd":[{"id":"EUVD-2023-31282","description":"Cross-site request forgery (CSRF) vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote unauthenticated attacker to hijack the authentication and perform unintended operations by having a logged-in user view a malicious page. [Note] Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers/network interface via a web browser. According to SEIKO EPSON CORPORATION, it is also called as Remote Manager in some products. Web Config is pre-installed in some printers/network interface provided by SEIKO EPSON CORPORATION. For the details of the affected product names/model numbers, refer to the information provided by the vendor.","status":"published","published":"2023-04-11T00:00:00Z","modified":"2025-02-10T21:27:09Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-03T00:04:00.770319Z"}],"ghsa":[{"id":"GHSA-rjmj-fvvx-96gg","title":"Cross-site request forgery (CSRF) vulnerability in SEIKO EPSON printers/network interface Web...","description":"Cross-site request forgery (CSRF) vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote unauthenticated attacker to hijack the authentication and perform unintended operations by having a logged-in user view a malicious page. [Note] Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers/network interface via a web browser. According to SEIKO EPSON CORPORATION, it is also called as Remote Manager in some products. Web Config is pre-installed in some printers/network interface provided by SEIKO EPSON CORPORATION. For the details of the affected product names/model numbers, refer to the information provided by the vendor.","status":"published","published":"2023-04-11T09:30:23Z","modified":"2024-04-04T03:23:47Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79","CWE-352"],"updated_at":"2026-11-02T14:56:14.332077Z"}],"nvd":[{"id":"CVE-2023-27520","description":"Cross-site request forgery (CSRF) vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote unauthenticated attacker to hijack the authentication and perform unintended operations by having a logged-in user view a malicious page. [Note] Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers/network interface via a web browser. According to SEIKO EPSON CORPORATION, it is also called as Remote Manager in some products. Web Config is pre-installed in some printers/network interface provided by SEIKO EPSON CORPORATION. For the details of the affected product names/model numbers, refer to the information provided by the vendor.","status":"published","published":"2023-04-11T09:15:08.157Z","modified":"2026-06-17T05:45:23.11Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:07:53.719171Z"}]}}