CVE-2020-28929: Critical severity epson eps tse server 8 firmware vulnerability
Unrestricted access to the log downloader functionality in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to remotely retrieve administrative hashed credentials via the maintenance/troubleshoot.php?download=1 URI.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-28929?
CVE-2020-28929 is a vulnerability that allows an unauthenticated attacker to remotely retrieve administrative hashed credentials in EPSON EPS TSE Server 8 (21.0.11) through the log downloader functionality.
How severe is CVE-2020-28929?
CVE-2020-28929 has a severity rating of 9.8 (critical).
What software is affected by CVE-2020-28929?
EPSON EPS TSE Server 8 (21.0.11) firmware is affected by CVE-2020-28929.
How can an unauthenticated attacker exploit CVE-2020-28929?
An unauthenticated attacker can exploit CVE-2020-28929 by remotely accessing the maintenance/troubleshoot.php?download=1 URI and retrieve administrative hashed credentials.
Is EPSON EPS TSE Server 8 vulnerable to CVE-2020-28929?
No, EPSON EPS TSE Server 8 is not vulnerable to CVE-2020-28929.