CVE-2018-18960
Severity Score
5.9
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
An issue was discovered on Epson WorkForce WF-2861 10.48 LQ22I3, 10.51.LQ20I6 and 10.52.LQ17IA devices. They use SNMP to find certain devices on the network, but the default version is v2c, allowing an amplification attack.
Se ha descubierto un problema en dispositivos Epson WorkForce WF-2861 10.48 LQ22I3, 10.51.LQ20I6 y 10.52.LQ17IA. Emplean SNMP para encontrar ciertos dispositivos en la red, pero la versión por defecto es v2c, lo que permite un ataque de amplificación.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2018-11-05 CVE Reserved
- 2018-12-24 CVE Published
- 2024-08-05 CVE Updated
- 2024-08-05 First Exploit
- 2024-11-02 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-400: Uncontrolled Resource Consumption
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|---|---|
| https://github.com/epistemophilia/CVEs/blob/master/Epson-WorkForce-WF2861/CVE-2018-18960/poc-cve-2018-18960.py | 2024-08-05 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Epson Search vendor "Epson" | Epson Workforce Wf-2861 Firmware Search vendor "Epson" for product "Epson Workforce Wf-2861 Firmware" | 10.48_lq22i3 Search vendor "Epson" for product "Epson Workforce Wf-2861 Firmware" and version "10.48_lq22i3" | - |
Affected
| in | Epson Search vendor "Epson" | Epson Workforce Wf-2861 Search vendor "Epson" for product "Epson Workforce Wf-2861" | - | - |
Safe
|
| Epson Search vendor "Epson" | Epson Workforce Wf-2861 Firmware Search vendor "Epson" for product "Epson Workforce Wf-2861 Firmware" | 10.51.lq20i6 Search vendor "Epson" for product "Epson Workforce Wf-2861 Firmware" and version "10.51.lq20i6" | - |
Affected
| in | Epson Search vendor "Epson" | Epson Workforce Wf-2861 Search vendor "Epson" for product "Epson Workforce Wf-2861" | - | - |
Safe
|
| Epson Search vendor "Epson" | Epson Workforce Wf-2861 Firmware Search vendor "Epson" for product "Epson Workforce Wf-2861 Firmware" | 10.52.lq17ia Search vendor "Epson" for product "Epson Workforce Wf-2861 Firmware" and version "10.52.lq17ia" | - |
Affected
| in | Epson Search vendor "Epson" | Epson Workforce Wf-2861 Search vendor "Epson" for product "Epson Workforce Wf-2861" | - | - |
Safe
|