PT-2025-46732 · Epson · Epson Stylus Sx510W
CVSS v4.0
8.7
High
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
Epson Stylus SX510W (affected versions not specified)
Description
The embedded web management service in the Epson Stylus SX510W does not correctly process consecutive ampersand characters within query parameters when accessing the ''/PRESENTATION/HTML/TOP/INDEX.HTML'' endpoint. Sending a crafted request with this issue can lead to incorrect input parsing or memory handling, potentially causing the printer process to terminate or the device to power off, resulting in a denial of service. The vulnerable parameter is within the query string of the specified API endpoint.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Epson Stylus Sx510W