{"id":"CVE-2018-0689","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-0689","generatedAt":"2026-10-28T21:19:37.831Z","title":"HTTP header injection vulnerability in SEIKO EPSON printers and scanners (DS-570W firmware versions released prior to 2018 March 13, DS-780N firmware versions released prior to 2018 March 13, EP-10VA firmware versions released prior to 2017 September 4,…","description":"HTTP header injection vulnerability in SEIKO EPSON printers and scanners (DS-570W firmware versions released prior to 2018 March 13, DS-780N firmware versions released prior to 2018 March 13, EP-10VA firmware versions released prior to 2017 September 4, EP-30VA firmware versions released prior to 2017 June 19, EP-707A firmware versions released prior to 2017 August 1, EP-708A firmware versions released prior to 2017 August 7, EP-709A firmware versions released prior to 2017 June 12, EP-777A firmware versions released prior to 2017 August 1, EP-807AB/AW/AR firmware versions released prior to 2017 August 1, EP-808AB/AW/AR firmware versions released prior to 2017 August 7, EP-879AB/AW/AR firmware versions released prior to 2017 June 12, EP-907F firmware versions released prior to 2017 August 1, EP-977A3 firmware versions released prior to 2017 August 1, EP-978A3 firmware versions released prior to 2017 August 7, EP-979A3 firmware versions released prior to 2017 June 12, EP-M570T firmware versions released prior to 2017 September 6, EW-M5071FT firmware versions released prior to 2017 November 2, EW-M660FT firmware versions released prior to 2018 April 19, EW-M770T firmware versions released prior to 2017 September 6, PF-70 firmware versions released prior to 2018 April 20, PF-71 firmware versions released prior to 2017 July 18, PF-81 firmware versions released prior to 2017 September 14, PX-048A firmware versions released prior to 2017 July 4, PX-049A firmware versions released prior to 2017 September 11, PX-437A firmware versions released prior to 2017 July 24, PX-M350F firmware versions released prior to 2018 February 23, PX-M5040F firmware versions released prior to 2017 November 20, PX-M5041F firmware versions released prior to 2017 November 20, PX-M650A firmware versions released prior to 2017 October 17, PX-M650F firmware versions released prior to 2017 October 17, PX-M680F firmware versions released prior to 2017 June 29, PX-M7050F firmware versions released prior to 2017 October 13, PX-M7050FP firmware versions released prior to 2017 October 13, PX-M7050FX firmware versions released prior to 2017 November 7, PX-M7070FX firmware versions released prior to 2017 April 27, PX-M740F firmware versions released prior to 2017 December 4, PX-M741F firmware versions released prior to 2017 December 4, PX-M780F firmware versions released prior to 2017 June 29, PX-M781F firmware versions released prior to 2017 June 27, PX-M840F firmware versions released prior to 2017 November 16, PX-M840FX firmware versions released prior to 2017 December 8, PX-M860F firmware versions released prior to 2017 October 25, PX-S05B/W firmware versions released prior to 2018 March 9, PX-S350 firmware versions released prior to 2018 February 23, PX-S5040 firmware versions released prior to 2017 November 20, PX-S7050 firmware versions released prior to 2018 February 21, PX-S7050PS firmware versions released prior to 2018 February 21, PX-S7050X firmware versions released prior to 2017 November 7, PX-S7070X firmware versions released prior to 2017 April 27, PX-S740 firmware versions released prior to 2017 December 3, PX-S840 firmware versions released prior to 2017 November 16, PX-S840X firmware versions released prior to 2017 December 8, PX-S860 firmware versions released prior to 2017 December 7) may allow a remote attackers to lead a user to a phishing site or execute an arbitrary script on the user's web browser.","published":"2019-01-09T23:29:02.000Z","lastModified":"2026-06-17T01:31:28.000Z","status":"Modified","sourceIdentifier":"vultures@jpcert.or.jp","cvss":{"version":"3.0","score":8.8,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},"cwe":["CWE-113"],"affected":["epson/ds-570w firmware","epson/ds-780n firmware","epson/ep-10va firmware","epson/ep-30va firmware","epson/ep-707a firmware","epson/ep-708a firmware","epson/ep-709a firmware","epson/ep-777a firmware","epson/ep-807ab firmware","epson/ep-807aw firmware","epson/ep-807ar firmware","epson/ep-808ab firmware","epson/ep-808aw firmware","epson/ep-808ar firmware","epson/ep-879ab firmware","epson/ep-879aw firmware","epson/ep-879ar firmware","epson/ep-907f firmware","epson/ep-977a3 firmware","epson/ep-978a3 firmware","epson/ep-979a3 firmware","epson/ep-m570t firmware","epson/ew-m5071ft firmware","epson/ew-m660ft firmware","epson/ew-m770t firmware","epson/pf-70 firmware","epson/pf-71 firmware","epson/pf-81 firmware","epson/px-048a firmware","epson/px-049a firmware","epson/px-437a firmware","epson/px-m350f firmware","epson/px-m5040f firmware","epson/px-m5041f firmware","epson/px-m650a firmware","epson/px-m650f firmware","epson/px-m680f firmware","epson/px-m7050f firmware","epson/px-m7050fp firmware","epson/px-m7050fx firmware","epson/px-m7070fx firmware","epson/px-m740f firmware","epson/px-m781f firmware","epson/px-m840f firmware","epson/px-m840fx firmware","epson/px-m860f firmware","epson/px-s05b firmware","epson/px-s05w firmware","epson/px-s350 firmware","epson/px-s5040 firmware","epson/px-s7050 firmware","epson/px-s7050ps firmware","epson/px-s7050x firmware","epson/px-s7070x firmware","epson/px-s740 firmware","epson/px-s840 firmware","epson/px-s840x firmware","epson/px-s860 firmware"],"epss":{"score":0.01642,"percentile":0.76275,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (1.64%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://jvn.jp/en/jp/JVN89767228/index.html","tags":["Third Party Advisory","VDB Entry"],"source":"vultures@jpcert.or.jp"},{"url":"https://www.epson.jp/support/misc/20181203_oshirase.htm","tags":["Vendor Advisory"],"source":"vultures@jpcert.or.jp"},{"url":"https://jvn.jp/en/jp/JVN89767228/index.html","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.epson.jp/support/misc/20181203_oshirase.htm","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-0689","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}