First published: Mon Dec 24 2018(Updated: )
An issue was discovered on Epson WorkForce WF-2861 10.48 LQ22I3, 10.51.LQ20I6 and 10.52.LQ17IA devices. On the 'Air Print Setting' web page, if the data for 'Bonjour Service Location' at /PRESENTATION/BONJOUR is more than 251 bytes when sending data for Air Print Setting, then the device no longer functions until a reboot.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Epson Epson Workforce Wf-2861 Firmware | =10.48_lq22i3 | |
Epson Epson Workforce Wf-2861 Firmware | =10.51.lq20i6 | |
Epson Epson Workforce Wf-2861 Firmware | =10.52.lq17ia | |
Epson Epson Workforce Wf-2861 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-18959 is a vulnerability found on Epson WorkForce WF-2861 devices that allows an attacker to cause a denial of service (device freeze) by sending a large amount of data to the 'Air Print Setting' web page.
CVE-2018-18959 has a severity rating of 7.5 out of 10, which is considered high.
The affected software versions are Epson WorkForce WF-2861 firmware 10.48 LQ22I3, 10.51.LQ20I6, and 10.52.LQ17IA.
There is currently no known fix for CVE-2018-18959. It is recommended to apply any security patches or updates provided by Epson when they become available.
You can find more information about CVE-2018-18959 on the GitHub page at: https://github.com/epistemophilia/CVEs/blob/master/Epson-WorkForce-WF2861/CVE-2018-18959/poc-cve-2018-18959.py