CVE-2025-64310

EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts. An administrative user's password may be identified through a brute force attack.

Score

CVSS 3.1 9.8 Critical

Status

Deferred - vultures@jpcert.or.jp

Published

2025-11-21

Last modified

2026-10-18

Weaknesses

CWE-307

Affected products

• Epson Web Control For Seiko Epson Projector Products (Seiko Epson Corporation)
• Epson Webconfig For Seiko Epson Projector Products (Seiko Epson Corporation)

References

• https://www.epson.co.uk/en_GB/faq/KA-02041/contents?loc=en-us
• https://www.epson.jp/support/misc_t/251120_oshirase.htm
• https://jvn.jp/en/vu/JVNVU95021911/