Vulnerability Reference: CVE-2026-73542
Description: Multiple EPSON printers and scanners contain outdated root certificates.
Impact: If the device accepts a certificate from an untrusted source, information transmitted by the printer or scanner could potentially be accessed by a third party.
There have been no reports of attacks exploiting this vulnerability.
This vulnerability was discovered and reported by Agni Athreya, a CyberArch Student Researcher at the Carl Vinson Institute of Government at the University of Georgia.
Solution: Deploy the latest root certificate, replacing the old certificate.
Please follow the steps to update the Root Certificate:
Consumer Products
- Check the printer or scanner IP address from the network settings or network status sheet.
- Open a PC web browser and enter the device IP address. This provides access to the WebConfig for your device.
- Select Root Certificate Update, then hit Start. If necessary, please enter the administrator password (the default password is the product serial number).
- Verify that the update has been completed. Return to the WebConfig home screen and select Root Certificate Update again. Verify that the root certificate is 2.04 or later. If you have 2.04 or later, the update is complete.
Business Products
- Check the printer or scanner IP address from the network settings or network status sheet.
- Open a PC web browser, enter the device IP address. This provides access to the WebConfig for your device.
- Sign in as Administrator. Select Network Security. Enter the User Name and Current Password on the administrator logon screen, then click Confirm.
- Select Root Certificate Update and click Start. Wait for the update to finish. Open Root Certificate Update again and confirm that the current root certificate version has been updated to 02.04 or later. If you have 2.04 or later, the update is complete.