Vulnerability details
CVE-2025-64310
Seiko Epson EPSON WebConfig for SEIKO EPSON Projector ProductsSeiko Epson Epson Web Control for SEIKO EPSON Projector Products
CVSS 4.0
9.3Critical
Official description
EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts. An administrative user's password may be identified through a brute force attack.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 9.3Critical | 4.0 | CVEProject cvelistV5 (CNA) (jpcert) | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
| 9.8Critical | 3.1 | CVEProject cvelistV5 (CNA) (jpcert) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Seiko Epson Corporation | EPSON WebConfig for SEIKO EPSON Projector Products | see the information provided by the vendor | CVEProject cvelistV5 (CNA) |
| Seiko Epson Corporation | Epson Web Control for SEIKO EPSON Projector Products | see the information provided by the vendor | CVEProject cvelistV5 (CNA) |
References and advisories
3
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-11-21
- Last updated
- 2025-12-23
- State
- Published
- Assigner (CNA)
- jpcert
Exploit prediction (EPSS)
0.48%
Probability of exploitation in 30 days
42%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-307Improper restriction of excessive authentication attempts