CVE-2025-64310
EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts. An administrative user's password may be identified through a brute force attack.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.8
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- EPSS probability
- 0.46%
- CWE
- CWE-307
- Published
- 2025-11-21
- Last modified
- 2026-03-12
Affected products
- SEIKO EPSON CORPORATION EPSON WebConfig for SEIKO EPSON Projector Products
- SEIKO EPSON CORPORATION Epson Web Control for SEIKO EPSON Projector Products
Weakness type
Related vulnerabilities
- CVE-2026-78490 — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to...
- CVE-2026-86729 — WWBN AVideo Unrestricted Authentication Attempts via get_api_preauthorize
- CVE-2026-6223 — OTP Bypass in Bahçelievler Muncipality's BiHayat App
- CVE-2026-20514 — In Audio HAL, there is a possible information disclosure due to a missing permission check. This...
- CVE-2026-20512 — In Audio HAL, there is a possible escalation of privilege due to improper input validation. This...
- CVE-2026-86186 — AVideo API Rate Limit Bypass via Bot User-Agent Header
- CVE-2026-85237 — Missing Rate Limiting in Email OTP Verification Allows Brute-Force Authentication Bypass
- CVE-2026-13348 — CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could...