by Kastro
Paper/Archive/CVE-2025-64310

CVE-2025-64310

SEIKO EPSON CORPORATION EPSON WebConfig for SEIKO EPSON Projector Products — EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts.

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 41.7.417 × 208.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts. An administrative user's password may be identified through a brute force attack.

Affected

ProductAffectedFixed inSource
EPSON WebConfig for SEIKO EPSON Projector Productssee the information provided by the vendor–CNA
Epson Web Control for SEIKO EPSON Projector Productssee the information provided by the vendor–CNA

Scores by source

jpcert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
jpcert (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refepson.co.uk/en_GB/faq/KA-02041/contents?loc=en-usrefepson.jp/support/misc_t/251120_oshirase.htmrefjvn.jp/en/vu/JVNVU95021911