Vulnerability in Web Config for Printers and Scanners

Vulnerability Reference: CVE-2026-58315

Description

A vulnerability has been identified in Epson Web Config (*1) that allows users to check device status and change settings via a web browser on certain printer and scanner products.

(*1) Epson Web Config is a feature that allows users to check the device status and change settings by entering the device's IP address into the URL field of a web browser such as Edge or Safari.

Identified Vulnerability

This is a Cross-Site Request Forgery (CSRF) vulnerability.

If a user accesses a malicious website created by a third party, there is a possibility that the settings of the affected device may be altered via the Web Config interface.

Impact of the Vulnerability

At present, no incidents of this vulnerability being exploited have been confirmed.

Workaround

To ensure safe and secure use of your product, please refer to the Security Guidebook at the following URL: Security for printers and MFPs

< Installation and configuration based on the Security Guidebook (Chapter 3) >

  1. Do not connect the product directly to the Internet, and instead install it within a network protected by a firewall. When doing so, use a private IP address.

    < Operational precautions related to this issue >

  2. Always log out after logging in as an administrator.
    Do not remain logged into Web Config as an administrator for extended periods. Be sure to log out after completing your work.
    3. While logged in as an administrator, do not browse suspicious websites, click untrusted links, open unknown files or similar actions.

Epson's Security Initiatives

For more information on the Security Guidebook, please refer to:

Precautions When Connecting Epson Products to a Network

Affected Products

 

Click here

Inkjet Printers

EcoTank Series: ET-15000, ET-1810, ET-18100, ET-2700, ET-2710 , ET-2711, ET-2712, ET-2714, ET-2715, ET-2720, ET-2721, ET-2726, ET-2750, ET-2750U, ET-2751, ET-2756, ET-2810, ET-2811, ET-2812, ET-2814, ET-2815, ET-2820, ET-2821, ET-2825, ET-2826, ET-2830, ET-2840, ET-2850, ET-2850U, ET-2851, ET-2856, ET-2860, ET-2861, ET-2862, ET-2864, ET-2865, ET-2870, ET-2870U, ET-2871, ET-2875, ET-2876, ET-3700, ET-3750, ET-3850, ET-4700, ET-4750, ET-4750U, ET-4800, ET-4810, ET-4850, ET-4850U, ET-4856, ET-5150, ET-5170, ET-5185, ET-8500, ET-8550, ET-M1120, ET-M1170, ET-M1170U, ET-M1180, ET-M1180B, ET-M2120, ET-M2170, ET-M3170, ET-M3180, ET-M3180B

L Series: L11050, L1250, L1270, L14150, L18050, L3150, L3151, L3156, L3160, L3250, L3251, L3252, L3256, L3260, L3266, L3270, L3271, L3276, L3280, L3286, L3550, L3560, L4150, L4156, L4160, L4167, L4260, L4266, L4267, L5190, L5290, L5296, L5310, L5316, L5590, L6160, L6170, L6176, L6190, L6260, L6270, L6276, L6290, L6460, L6490, L6499, L8050, L8160, L8180

M Series: M1050, M1120, M1170, M1180, M2050, M2110, M2120, M2170, M3170, M3180

M Series: WF-100, WF-110, WF-2110, WF-2810, WF-2820, WF-2830, WF-2835, WF-2840, WF-2845, WF-2850, WF-2860, WF-2865, WF-2870, WF-2880, WF-2885, WF-2910, WF-2930, WF-2935, WF-2950, WF-2960, WF-2965

Expression Series: XP-15000, XP-2100, XP-2105, XP-2150, XP-2155, XP-2200, XP-2205, XP-3100, XP-3105, XP-3150, XP-3155, XP-3200, XP-3205, XP-4100, XP-4105, XP-4150, XP-4155, XP-4200, XP-4205, XP-5100, XP-5105, XP-5150, XP-5155, XP-5200, XP-5205, XP-6000, XP-6005, XP-6100, XP-6105, XP-65, XP-7100, XP-8500, XP-8505, XP-8600, XP-8605, XP-8606, XP-8700, XP-970

Scanners

FastFoto FF-680W