Eps Tse Server 8 Firmware

eps_tse_server_8_firmware

Vendor: Epson • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-28931 1Epson 1Eps Tse Server 8 Firmware Nov 21, 2024 Dec 16, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Lack of an anti-CSRF token in the entire administrative interface in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to force an administrator to execute external POST requests by visiting a malicious...Show more Lack of an anti-CSRF token in the entire administrative interface in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to force an administrator to execute external POST requests by visiting a malicious website.Show less
CVE-2020-28930 1Epson 1Eps Tse Server 8 Firmware Nov 21, 2024 Dec 16, 2020 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 A Cross-Site Scripting (XSS) issue in the 'update user' and 'delete user' functionalities in settings/users.php in EPSON EPS TSE Server 8 (21.0.11) allows an authenticated attacker to inject a JavaScript payload in the u...Show more A Cross-Site Scripting (XSS) issue in the 'update user' and 'delete user' functionalities in settings/users.php in EPSON EPS TSE Server 8 (21.0.11) allows an authenticated attacker to inject a JavaScript payload in the user management page that is executed by an administrator.Show less
CVE-2020-28929 1Epson 1Eps Tse Server 8 Firmware Nov 21, 2024 Dec 16, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Unrestricted access to the log downloader functionality in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to remotely retrieve administrative hashed credentials via the maintenance/troubleshoot.php?d...Show more Unrestricted access to the log downloader functionality in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to remotely retrieve administrative hashed credentials via the maintenance/troubleshoot.php?download=1 URI.Show less