> CVE-2026-23767

« BACK_TO_HOME
PUBLISHED
2026-03-05 06:16
MODIFIED
2026-03-05 06:16
EPSS (Prob. Exploit)
0.46%
Top 60.7%
DATA SOURCES:
NVD 🔗 2026-03-05 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-10-25

> DESCRIPTION

ESC/POS, a printer control language designed by Seiko Epson Corporation, lacks mechanisms for user authentication and command authorization, does not provide controls to restrict sources or destinations of network communication, and transmits commands without encryption or integrity protection.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-306

> CWE DETAILED DESCRIPTIONS

CWE-306: Missing Authentication for Critical Functionality - The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

> HISTORIQUE DES MODIFICATIONS

Première apparition
05/03/2026 06:16
Source: NVD
📊 ENRICHISSEMENT 01/11/2026 06:58
CWE
Champ modifié: Description CWE
Ancienne valeur:
CWE-306: Missing Authentication for Critical Function - The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of res...
Nouvelle valeur:
CWE-306: Missing Authentication for Critical Functionality - The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount o...
📊 ENRICHISSEMENT 01/04/2026 06:01
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-306: Missing Authentication for Critical Function - The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of res...
Total des modifications: 2 Dernière mise à jour: 1 week ago

> REFERENCES

https://download4.epson.biz/sec_pubs/bs/pdf/IP_Filtering_Guide_en_revA.pdf
https://jvn.jp/en/ta/JVNTA97995322/
https://www.epson.jp/support/misc_t/260305_oshirase.htm
« BACK_TO_HOME