{"id":"CVE-2024-47295","aliases":["EUVD-2024-42332","GHSA-x2wv-q3cc-vc36"],"status":"published","title":"Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote...","description":"Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote unauthenticated attacker to set an arbitrary password and operate the device with an administrative privilege. As for the details of the affected versions, see the information provided by the vendor under [References].","severity":{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00811,"percentile":0.57368,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1188"],"published":"2024-10-01T03:16:40Z","modified":"2026-06-17T07:56:49Z","products":[{"vendor":"seiko epson corporation","product":"web config"},{"vendor":"seiko_epson_corporation","product":"web_config"}],"references":[{"url":"https://epson.com/Support/wa00958"},{"url":"https://www.epson.jp/support/misc_t/240930_03_oshirase.htm"},{"url":"https://jvn.jp/en/vu/JVNVU95133448/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47295"},{"url":"https://jvn.jp/en/vu/JVNVU95133448"},{"url":"https://github.com/advisories/GHSA-x2wv-q3cc-vc36"}],"sources":{"cve":[{"id":"CVE-2024-47295","description":"Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote unauthenticated attacker to set an arbitrary password and operate the device with an administrative privilege. As for the details of the affected versions, see the information provided by the vendor under [References].","status":"published","published":"2024-10-01T03:16:40.052Z","modified":"2024-11-11T07:15:21.646Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-1188"],"updated_at":"2026-11-02T14:33:57.638551Z"}],"euvd":[{"id":"EUVD-2024-42332","description":"Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote unauthenticated attacker to set an arbitrary password and operate the device with an administrative privilege. As for the details of the affected versions, see the information provided by the vendor under [References].","status":"published","published":"2024-10-01T03:16:40Z","modified":"2024-11-11T07:15:21Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:05:04.843383Z"}],"ghsa":[{"id":"GHSA-x2wv-q3cc-vc36","title":"Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote...","description":"Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote unauthenticated attacker to set an arbitrary password and operate the device with an administrative privilege. As for the details of the affected versions, see the information provided by the vendor under [References].","status":"published","published":"2024-10-01T06:30:47Z","modified":"2024-11-11T09:30:41Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-1188"],"updated_at":"2026-11-02T14:58:46.999726Z"}],"nvd":[{"id":"CVE-2024-47295","description":"Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote unauthenticated attacker to set an arbitrary password and operate the device with an administrative privilege. As for the details of the affected versions, see the information provided by the vendor under [References].","status":"published","published":"2024-10-01T04:15:18.04Z","modified":"2026-06-17T07:56:49.993Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-1188"],"updated_at":"2026-11-02T14:10:29.044588Z"}]}}