Cross Site Scripting Vulnerability in Epson WebConfig for TM Products

Vulnerability Reference: CVE-2017-6443

Description: The EPSON WebConfig utility (Web Version) for the TM products listed below have a vulnerability that may compromise the security of the printer’s web browser.  Note this vulnerability is only present in products with built-in Ethernet or wireless network.

Impact: Successful exploitation of this vulnerability can lead to unauthorized control of the system by a low privilege user. Epson is not aware of any reported incidents to date.

Solution: To ensure the security of your Epson product, please download and install the EPSON Firmware Update for your product below. In the meantime, and as a general rule to help secure all devices, end-users and their administrators should always implement and maintain industry-standard security controls and practices in setting up and managing their networks. Those practices include immediately replacing default passwords with strong passwords and installing printer software behind a firewall.

This firmware is compatible with Windows 11, Windows 10 32/64-bit, Windows 8.1 32/64-bit, Windows 8 32/64-bit, Windows 7 32/64-bit, Windows Vista 32/64-bit, Windows XP 32/64-bit, Windows 2000.

By downloading files from this page, you are agreeing to abide by the terms and conditions of Epson's Software License Agreement.