The web service on Epson WorkForce WF-2861 10.48 LQ22I3(Recovery-mode), WF-2861 10.51.LQ20I6, and WF-2861 10.52.LQ17IA devices allows remote attackers to cause a denial of service via a FIRMWAREUPDATE GET request, as demonstrated by the /DOWN/FIRMWAREUPDATE/ROM1 URI.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Epson_workforce_wf-2861_firmware | Epson | 10.48_lq22i3 (including) | 10.48_lq22i3 (including) |
Epson_workforce_wf-2861_firmware | Epson | 10.51.lq20i6 (including) | 10.51.lq20i6 (including) |
Epson_workforce_wf-2861_firmware | Epson | 10.52.lq17ia (including) | 10.52.lq17ia (including) |