CVE-2020-28931

Name of the Vulnerable Software and Affected Versions EPSON EPS TSE Server 8 version 21.0.11

Description The issue is related to the lack of an anti-CSRF token in the administrative interface, allowing an unauthenticated attacker to force an administrator to execute external POST requests by visiting a malicious website.

Recommendations For EPSON EPS TSE Server 8 version 21.0.11, consider implementing an anti-CSRF token in the administrative interface to prevent unauthorized requests. As a temporary workaround, restrict access to the administrative interface to minimize the risk of exploitation.