Takaya Noma

The issue is related to an improper authentication vulnerability that allows an attacker to execute an arbitrary command with root privilege via the internet.

The issue allows an attacker who has obtained high privileges to execute arbitrary scripts.

The issue allows an attacker to execute an arbitrary OS command via the internet due to the use of a hard-coded password.

The issue is related to improper access control, allowing an attacker to obtain device information via the internet.

The issue allows an attacker to execute an arbitrary OS command with root privilege via the internet.

An improper authentication vulnerability exists in multiple printers and scanners that implement Web Based Management provided by BROTHER INDUSTRIES, LTD. This vulnerability can be exploited by a network-adjacent user to impersonate an administrative user.

A cross-site request forgery issue allows a remote unauthenticated attacker to perform unintended operations on the affected product. The vulnerability is present in multiple printers and scanners that implement Web Based Management provided by BROTHER INDUSTRIES, LTD.

An improper authentication issue in T&D Corporation and ESPEC MIC CORP. data logger products allows a remote unauthenticated attacker to login to the product as a registered user.

A client-side enforcement of server-side security issue exists in T&D Corporation and ESPEC MIC CORP. data logger products, which may lead to an arbitrary script execution on a logged-in user's web browser.

Missing authentication for a critical function exists in the affected data logger products, which may allow a remote unauthenticated attacker to alter the product settings without authentication.

Cross-site request forgery (CSRF) allows a remote unauthenticated attacker to conduct an arbitrary operation by having a logged-in user view a malicious page.

A cross-site request forgery (CSRF) issue allows a remote unauthenticated attacker to hijack the authentication and perform unintended operations by having a logged-in user view a malicious page. Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers/network interface via a web browser, also known as Remote Manager in some products. It is pre-installed in some printers/network interface provided by SEIKO EPSON CORPORATION.

A cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated attacker with administrative privilege to inject an arbitrary script. Web Config is a software that enables users to check the status and change the settings of SEIKO EPSON printers/network interface via a web browser. It is also known as Remote Manager in some products and is pre-installed in some printers/network interface provided by SEIKO EPSON CORPORATION.

A cross-site scripting issue allows a remote authenticated attacker with administrative privileges to inject an arbitrary script.

A stored cross-site scripting issue allows a remote authenticated attacker with administrative privileges to inject arbitrary scripts into Kyocera Document Solutions MFPs and printers.

A missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product settings without authentication by sending a specially crafted request.

A vulnerability exists where session information is easily guessable, potentially allowing a network-adjacent attacker to log in to the product by spoofing a user with guessed session information.