Find a vulnerability

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2018/JVNDB-2018-000128.html",
  "dc:date": "2019-09-27T09:55+09:00",
  "dcterms:issued": "2018-12-06T16:19+09:00",
  "dcterms:modified": "2019-09-27T09:55+09:00",
  "description": "Multiple printers and scanners provided by SEIKO EPSON CORPORATION contain multiple vulnerabilities listed below.\r\n* Open Redirect (CWE-601) - CVE-2018-0688\r\n* HTTP header injection (CWE-113) - CVE-2018-0689\r\n\r\nToshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2018/JVNDB-2018-000128.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:epson:ds-570w",
      "@product": "DS-570W",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:ds-780n",
      "@product": "DS-780N",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:ep-10va",
      "@product": "EP-10VA",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:ep-30va",
      "@product": "EP-30VA",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:ep-707a",
      "@product": "EP-707A",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:ep-708a",
      "@product": "EP-708A",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:ep-709a",
      "@product": "EP-709A",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:ep-777a",
      "@product": "EP-777A",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:ep-807ab_aw_ar",
      "@product": "EP-807AB/AW/AR",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:ep-808ab_aw_ar",
      "@product": "EP-808AB/AW/AR",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:ep-879ab_aw_ar",
      "@product": "EP-879AB/AW/AR",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:ep-907f",
      "@product": "EP-907F",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:ep-977a3",
      "@product": "EP-977A3",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:ep-978a3",
      "@product": "EP-978A3",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:ep-979a3",
      "@product": "EP-979A3",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:ep-m570t",
      "@product": "EP-M570T",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:ew-m5071ft",
      "@product": "EW-M5071FT",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:ew-m660ft",
      "@product": "EW-M660FT",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:ew-m770t",
      "@product": "EW-M770T",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:pf-70",
      "@product": "PF-70",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:pf-71",
      "@product": "PF-71",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:pf-81",
      "@product": "PF-81",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-048a",
      "@product": "PX-048A",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-049a",
      "@product": "PX-049A",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-437a",
      "@product": "PX-437A",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-m350f",
      "@product": "PX-M350F",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-m5040f",
      "@product": "PX-M5040F",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-m5041f",
      "@product": "PX-M5041F",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-m650a",
      "@product": "PX-M650A",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-m650f",
      "@product": "PX-M650F",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-m680f",
      "@product": "PX-M680F",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-m7050f",
      "@product": "PX-M7050F",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-m7050fp",
      "@product": "PX-M7050FP",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-m7050fx",
      "@product": "PX-M7050FX",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-m7070fx",
      "@product": "PX-M7070FX",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-m740f",
      "@product": "PX-M740F",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-m741f",
      "@product": "PX-M741F",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-m780f",
      "@product": "PX-M780F",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-m781f",
      "@product": "PX-M781F",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-m840f",
      "@product": "PX-M840F",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-m840fx",
      "@product": "PX-M840FX",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-m860f",
      "@product": "PX-M860F",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-s05b_w",
      "@product": "PX-S05B/W",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-s350",
      "@product": "PX-S350",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-s5040",
      "@product": "PX-S5040",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-s7050",
      "@product": "PX-S7050",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-s7050ps",
      "@product": "PX-S7050PS",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-s7050x",
      "@product": "PX-S7050X",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-s7070x",
      "@product": "PX-S7070X",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-s740",
      "@product": "PX-S740",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-s840",
      "@product": "PX-S840",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-s840x",
      "@product": "PX-S840X",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:epson:px-s860",
      "@product": "PX-S860",
      "@vendor": "SEIKO EPSON CORPORATION",
      "@version": "2.2"
    }
  ],
  "sec:cvss": [
    {
      "@score": "4.3",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
      "@version": "2.0"
    },
    {
      "@score": "4.7",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2018-000128",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN89767228/index.html",
      "@id": "JVN#89767228",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0688",
      "@id": "CVE-2018-0688",
      "@source": "CVE"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0689",
      "@id": "CVE-2018-0689",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2018-0688",
      "@id": "CVE-2018-0688",
      "@source": "NVD"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2018-0689",
      "@id": "CVE-2018-0689",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-20",
      "@title": "Improper Input Validation(CWE-20)"
    }
  ],
  "title": "Multiple vulnerabilities in multiple SEIKO EPSON printers and scanners"
}