ep1st/CVEs

ep1st/CVEs

Unavailable

This project is no longer available (or publicly accessible) from GitHub

Releases0

Stars2

my cve lists

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2019-7404 ↗	May 13, 2019Monday, 13 May 2019, 14:29	—	5 MEDIUM
An issue was discovered on LG GAMP-7100, GAPM-7200, and GAPM-8000 routers. An unauthenticated user can read a log file via an HTTP request containing its full pathname, such as http://192.168.0.1/var/gapm7100_${today's_date}.log for reading a filename such as gapm7100_190101.log.
CVE-2018-18959 ↗	Dec 24, 2018Monday, 24 December 2018, 17:29	—	5 MEDIUM
An issue was discovered on Epson WorkForce WF-2861 10.48 LQ22I3, 10.51.LQ20I6 and 10.52.LQ17IA devices. On the 'Air Print Setting' web page, if the data for 'Bonjour Service Location' at /PRESENTATION/BONJOUR is more than 251 bytes when sending data for Air Print Setting, then the device no longer functions until a reboot.
CVE-2018-18960 ↗	Dec 24, 2018Monday, 24 December 2018, 17:29	—	4.3 MEDIUM
An issue was discovered on Epson WorkForce WF-2861 10.48 LQ22I3, 10.51.LQ20I6 and 10.52.LQ17IA devices. They use SNMP to find certain devices on the network, but the default version is v2c, allowing an amplification attack.
CVE-2018-19232 ↗	Dec 24, 2018Monday, 24 December 2018, 17:29	—	5 MEDIUM
The web service on Epson WorkForce WF-2861 10.48 LQ22I3(Recovery-mode), WF-2861 10.51.LQ20I6, and WF-2861 10.52.LQ17IA devices allows remote attackers to cause a denial of service via a FIRMWAREUPDATE GET request, as demonstrated by the /DOWN/FIRMWAREUPDATE/ROM1 URI.
CVE-2018-19248 ↗	Dec 24, 2018Monday, 24 December 2018, 17:29	—	6.4 MEDIUM
The web service on Epson WorkForce WF-2861 10.48 LQ22I3(Recovery-mode), WF-2861 10.51.LQ20I6, and WF-2861 10.52.LQ17IA devices allows remote attackers to upload a firmware file and reset the printer without authentication by making a request to the /DOWN/FIRMWAREUPDATE/ROM1 URI and a POST request to the /FIRMWAREUPDATE URI.