Vulnerability in Web Config for Printers and Scanners
Vulnerability Reference: CVE-2026-58315
Description
A vulnerability has been identified in Epson Web Config (*1) that allows users to check device status and change settings via a web browser on certain printer and scanner products.
(*1) Epson Web Config is a feature that allows users to check the device status and change settings by entering the device's IP address into the URL field of a web browser such as Edge or Safari.
Identified Vulnerability
This is a Cross-Site Request Forgery (CSRF) vulnerability.
If a user accesses a malicious website created by a third party, there is a possibility that the settings of the affected device may be altered via the Web Config interface.
Impact of the Vulnerability
At present, no incidents of this vulnerability being exploited have been confirmed.
Workaround
To ensure safe and secure use of your product, please refer to the Security Guidebook at the following URL: Security for printers and MFPs
< Installation and configuration based on the Security Guidebook (Chapter 3) >
- Do not connect the product directly to the Internet, and instead install it within a network protected by a firewall. When doing so, use a private IP address.
< Operational precautions related to this issue >
- Always log out after logging in as an administrator.
Do not remain logged into Web Config as an administrator for extended periods. Be sure to log out after completing your work. - While logged in as an administrator, do not browse suspicious websites, click untrusted links, open unknown files or similar actions.
Epson's Security Initiatives
For more information on the Security Guidebook, please refer to:
Precautions When Connecting Epson Products to a Network
Affected Products
Registered | Category | Device ID | Product name | Destination |
FY22 | BIJ_Basic / CP | L3560 Series | L3560 | EPIL |
FY22 | BIJ_Basic / CP | L8050 Series | L8050 | EPIL |
FY22 | BIJ_Basic / CP | L18050 Series | L18050 | EPIL |
FY22 | BIJ_Basic / CP | L11050 Series | L11050 | EPIL |
FY22 | BIJ_Basic / CP | M2050 Series | M2050 | EPIL |
FY22 | BIJ_Basic / CP | M1050 Series | M1050 | EPIL |
FY19 | BIJ_Basic / CP | M2120 Series | M2120 | EPIL |
FY19 | BIJ_Basic / CP | M2110 Series | M2110 | EPIL |
FY19 | BIJ_Basic / CP | L14150 Series | L14150 | EPIL |
FY19 | BIJ_Basic / CP | L6270 Series | L6270 | EPIL |
FY19 | BIJ_Basic / CP | L4260 Series | L4260 | EPIL |
FY19 | BIJ_Basic / CP | L5290 Series | L5290 | EPIL |
FY19 | BIJ_Basic / CP | L3260 Series | L3260 | EPIL |
FY19 | BIJ_Basic / CP | L3260 Series | L3266 | EPIL3 |
FY19 | BIJ_Basic / CP | L3250 Series | L3250 | EPIL |
FY19 | BIJ_Basic / CP | L3250 Series | L3251 | EPIL(Derivative) |
FY19 | BIJ_Basic / CP | L3250 Series | L3252 | EPIL(Derivative)1 |
FY19 | BIJ_Basic / CP | L3250 Series | L3255 | EPIL2 |
FY19 | BIJ_Basic / CP | L3250 Series | L3256 | EPIL3 |
FY19 | BIJ_Basic / CP | L1250 Series | L1250 | EPIL |
FY19 | BIJ_Basic / CP | L8180 Series | L8180 | EPIL |
FY19 | BIJ_Basic / CP | L6490 Series | L6490 | EPIL |
FY19 | BIJ_Basic / CP | L6460 Series | L6460 | EPIL |
FY19 | LFP | SC-F100 Series | SC-F130 | ESP/EPIL_ESP |
FY19 | LFP | SC-F100 Series | SC-F130 | ESP/EPIL_ESP |
FY19 | LFP | SC-F100 Series | SC-F130 | EPIL_India |
FY18 | BIJ_Basic / CP | L3150 Series | L3151 | EPIL(Derivative) |
FY18 | BIJ_Basic / CP | L3150 Series | L3152 | EPIL(Derivative)1 |
FY18 | BIJ_Basic / CP | L3150 Series | L3156 | EPIL3 |
FY18 | BIJ_Basic / CP | L3150 Series | L3150 | EPIL |
FY18 | BIJ_Basic / CP | L5190 Series | L5190 | EPIL |
FY18 | BIJ_Basic / CP | M1120 Series | M1120 | EPIL |
FY18 | BIJ_Basic / CP | M3170 Series | M3170 | EPIL |
FY18 | BIJ_Basic / CP | M3180 Series | M3180 | EPIL |
FY18 | BIJ_Basic / CP | M1180 Series | M1180 | EPIL |
FY18 | BIJ_Basic / CP | M2170 Series | M2170 | EPIL |
FY18 | BIJ_Basic / CP | M1170 Series | M1170 | EPIL |
FY17 | BIJ_Basic / CP | L4150 Series | L4150 | EPIL |
FY17 | BIJ_Basic / CP | L4160 Series | L4160 | EPIL |
FY17 | BIJ_Basic / CP | L6160 Series | L6160 | EPIL |
FY17 | BIJ_Basic / CP | L6170 Series | L6170 | EPIL |
FY17 | BIJ_Basic / CP | L6190 Series | L6190 | EPIL |
FY14 | Mobile | WF-100 Series | WF-100 | EPIL |