CVE-2024-47295
Last modified
CVE-2024-47295 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote unauthenticated attacker to set an arbitrary password and operate the device with an administrative privilege. As for the details of the affected versions, see the information provided by the vendor under [References].. EPSS estimates a 0.82% chance of exploitation in the next 30 days.
Description
Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote unauthenticated attacker to set an arbitrary password and operate the device with an administrative privilege. As for the details of the affected versions, see the information provided by the vendor under [References].
Metrics
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-47295?
How severe is CVE-2024-47295?
How do I fix CVE-2024-47295?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-4729A vulnerability was found in Campcodes Legal Case Management…5.4
- CVE-2024-47290Input validation vulnerability in the USB service module Imp…5.5
- CVE-2024-47291Permission vulnerability in the ActivityManagerService (AMS)…5.5
- CVE-2024-47292Path traversal vulnerability in the Bluetooth module Impact:…5.5
- CVE-2024-47293Out-of-bounds write vulnerability in the HAL-WIFI module Imp…7.5
- CVE-2024-47294Access permission verification vulnerability in the input me…7.5
- CVE-2024-47297Improper Neutralization of Input During Web Page Generation …7.1
- CVE-2024-47298Improper Neutralization of Input During Web Page Generation …5.4
- CVE-2024-47299Improper Neutralization of Input During Web Page Generation …5.9
- CVE-2024-4730A vulnerability classified as problematic has been found in …5.4
- CVE-2024-47300Improper Neutralization of Input During Web Page Generation …7.1
- CVE-2024-47301Improper Neutralization of Input During Web Page Generation …7.1
Are you affected by CVE-2024-47295?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST