CVE-2023-23572 - CVE House
Back to Database
Status published Unknown CVE-2023-23572

Cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config...

Vulnerability Description

Cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script. [Note] Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers/network interface via a web browser. According to SEIKO EPSON CORPORATION, it is also called as Remote Manager in some products. Web Config is pre-installed in some printers/network interface provided by SEIKO EPSON CORPORATION. For the details of the affected product names/model numbers, refer to the information provided by the vendor.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-23572

Credits & Attribution

No credits recorded in the NVD database.

References

More from SEIKO EPSON CORPORATION

View All →
CVE-2025-66635
Stack-based buffer overflow vulnerability exists in SEIKO EPSON Web Config....
High 8.6
CVE-2025-64310
EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector...
Critical 9.3
CVE-2025-42598
Multiple SEIKO EPSON printer drivers for Windows OS are configured...
High 8.4
CVE-2024-47295
Insecure initial password configuration issue in SEIKO EPSON Web Config...
High 8.1
CVE-2023-38556
Improper input validation vulnerability in SEIKO EPSON printer Web Config...
Unknown 0

Affected Vendor

SEIKO EPSON CORPORATION

View all reports →

Affected Software

SEIKO EPSON printers/network interface Web Config
Vulnerable Versions:
unspecified

Timeline

Official Publish: April 11th, 2023
Last Modified: February 11th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.