Resource exhaustion in Seiko Epson Stylus Sx510w
CVE-2023-7326
The Epson Stylus SX510W embedded web management service fails to properly handle consecutive ampersand characters in query parameters when accessing /PRESENTATION/HTML/TOP/INDEX.HTML. A remote attacker can send a malformed request that triggers improper input parsing or memory handling, resulting in the printer process shutting down or powering off, causing a denial of service condition.
Vulnerability class: DoS (Denial of Service)
EPSS: 0.005 (42.4th percentile) — read the EPSS interpretation.
Affected products
- Seiko Epson Stylus Sx510w — versions 0
Weakness classification (CWE)
References
- disclosure@vulncheck.com (exploit)
- disclosure@vulncheck.com (product)
- disclosure@vulncheck.com (third-party-advisory)