CVE-2020-6091

An exploitable authentication bypass vulnerability exists in the ESPON Web Control functionality of Epson EB-1470Ui MAIN: 98009273ESWWV107 MAIN2: 8X7325WWV303. A specially crafted series of HTTP requests can cause authentication bypass resulting in information disclosure. An attacker can send an HTTP request to trigger this vulnerability.

CVSS v3 9.1 CRITICAL
CVSS v2.0 6.4 MEDIUM

9.1^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

6.4^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability : 10.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://epson.com/support/wa00907
https://talosintelligence.com/vulnerability_reports/TALOS-2020-1011	Third Party Advisory
https://epson.com/support/wa00907
https://talosintelligence.com/vulnerability_reports/TALOS-2020-1011	Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:epson:eb-1470ui_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:epson:eb-1470ui:-:*:*:*:*:*:*:*

History

21 Nov 2024, 05:35

Type	Values Removed	Values Added
References	~~() https://epson.com/support/wa00907 -~~	() https://epson.com/support/wa00907 -
References	~~() https://talosintelligence.com/vulnerability_reports/TALOS-2020-1011 - Third Party Advisory~~	() https://talosintelligence.com/vulnerability_reports/TALOS-2020-1011 - Third Party Advisory

Information

Published : 2020-05-22 14:15

Updated : 2024-11-21 05:35

NVD link : CVE-2020-6091

Mitre link : CVE-2020-6091

CVE.ORG link : CVE-2020-6091

JSON object : View

Products Affected

epson

eb-1470ui_firmware
eb-1470ui

CWE

CWE-288

Authentication Bypass Using an Alternate Path or Channel

CWE-287

Improper Authentication

{"id": "CVE-2020-6091", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Secondary", "source": "talos-cna@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 3.9}]}, "published": "2020-05-22T14:15:12.107", "references": [{"url": "https://epson.com/support/wa00907", "source": "talos-cna@cisco.com"}, {"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2020-1011", "tags": ["Third Party Advisory"], "source": "talos-cna@cisco.com"}, {"url": "https://epson.com/support/wa00907", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2020-1011", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "talos-cna@cisco.com", "description": [{"lang": "en", "value": "CWE-288"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "An exploitable authentication bypass vulnerability exists in the ESPON Web Control functionality of Epson EB-1470Ui MAIN: 98009273ESWWV107 MAIN2: 8X7325WWV303. A specially crafted series of HTTP requests can cause authentication bypass resulting in information disclosure. An attacker can send an HTTP request to trigger this vulnerability."}, {"lang": "es", "value": "Se presenta una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n explotable en la funcionalidad ESPON Web Control de Epson EB-1470Ui MAIN: 98009273ESWWV107 MAIN2: 8X7325WWV303. Una serie especialmente dise\u00f1ada de peticiones HTTP puede causar una omisi\u00f3n de autenticaci\u00f3n, resultando en una divulgaci\u00f3n de informaci\u00f3n. Un atacante puede enviar una petici\u00f3n HTTP para activar esta vulnerabilidad."}], "lastModified": "2024-11-21T05:35:04.723", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:epson:eb-1470ui_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BF0D2F95-2B8B-40E7-BC71-5E5F475CF4B3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:epson:eb-1470ui:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3E9C519E-0D7E-469A-8AFB-F93EABD62F86"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "talos-cna@cisco.com"}