Cross Site Scripting Vulnerability in Epson WebConfig for TM Products

Vulnerability Reference: CVE-2017-6443

Description: The EPSON WebConfig utility (Web Version) for the TM products listed below have a vulnerability that may compromise the security of the printer’s web browser.  Note this vulnerability is only present in products with built-in Ethernet or wireless network.

Impact: Successful exploitation of this vulnerability can lead to unauthorized control of the system by a low privilege user. Epson is not aware of any reported incidents to date.

Solution: To ensure the security of your Epson product, please download and install the EPSON Firmware Update for your product below. In the meantime, and as a general rule to help secure all devices, end-users and their administrators should always implement and maintain industry-standard security controls and practices in setting up and managing their networks. Those practices include immediately replacing default passwords with strong passwords and installing printer software behind a firewall.

This firmware is compatible with Windows 11, Windows 10 32/64-bit, Windows 8.1 32/64-bit, Windows 8 32/64-bit, Windows 7 32/64-bit, Windows Vista 32/64-bit, Windows XP 32/64-bit, Windows 2000.

*This product bundles Dell BSAFE™ software developed by Dell Inc. in the United States. Copyright© 2021 Dell Inc. All rights reserved. BSAFE is a trademark or registered trademark of Dell Inc. in the United States and other countries.

By downloading files from this page, you are agreeing to abide by the terms and conditions of Epson's Software License Agreement.