Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-64310

EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts. An administrative user's password may be identified through a brute force attack.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:77a5b12e0c5633173a5b7f1c1a2b6b06adc8108de3249e29c9580c2aef1ab0f4
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
2

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"product":"Epson Web Control for SEIKO EPSON Projector Products","vendor":"SEIKO EPSON CORPORATION","versions":[{"status":"affected","version":"see the information provided by the vendor"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d0a84d58ab22684e94a436bc142ea06bc040296c849dd1e91845dadbfe1e46b4 · sha256:8ddbf429377c232c… · /containers/cna/affected/1

{"product":"EPSON WebConfig for SEIKO EPSON Projector Products","vendor":"SEIKO EPSON CORPORATION","versions":[{"status":"affected","version":"see the information provided by the vendor"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d0a84d58ab22684e94a436bc142ea06bc040296c849dd1e91845dadbfe1e46b4 · sha256:8ddbf429377c232c… · /containers/cna/affected/0
cvss · 2 assertions

{"metric":{"baseScore":9.8,"baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:d0a84d58ab22684e94a436bc142ea06bc040296c849dd1e91845dadbfe1e46b4 · sha256:8ddbf429377c232c… · /containers/cna/metrics/0/cvssV3_1

{"metric":{"baseScore":9.3,"baseSeverity":"CRITICAL","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0"},"metric_type":"cvssV4_0"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:d0a84d58ab22684e94a436bc142ea06bc040296c849dd1e91845dadbfe1e46b4 · sha256:8ddbf429377c232c… · /containers/cna/metrics/1/cvssV4_0

Affected products and versions

2 source assertions
{"product":"Epson Web Control for SEIKO EPSON Projector Products","vendor":"SEIKO EPSON CORPORATION","versions":[{"status":"affected","version":"see the information provided by the vendor"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d0a84d58ab22684e94a436bc142ea06bc040296c849dd1e91845dadbfe1e46b4 · sha256:8ddbf429377c232c… · /containers/cna/affected/1
{"product":"EPSON WebConfig for SEIKO EPSON Projector Products","vendor":"SEIKO EPSON CORPORATION","versions":[{"status":"affected","version":"see the information provided by the vendor"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d0a84d58ab22684e94a436bc142ea06bc040296c849dd1e91845dadbfe1e46b4 · sha256:8ddbf429377c232c… · /containers/cna/affected/0

Provider-owned CVSS observations

2 source assertions
{"metric":{"baseScore":9.8,"baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:d0a84d58ab22684e94a436bc142ea06bc040296c849dd1e91845dadbfe1e46b4 · sha256:8ddbf429377c232c… · /containers/cna/metrics/0/cvssV3_1
{"metric":{"baseScore":9.3,"baseSeverity":"CRITICAL","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0"},"metric_type":"cvssV4_0"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:d0a84d58ab22684e94a436bc142ea06bc040296c849dd1e91845dadbfe1e46b4 · sha256:8ddbf429377c232c… · /containers/cna/metrics/1/cvssV4_0

CWE assertions

1 source assertion
{"cweId":"CWE-307","description":"Improper restriction of excessive authentication attempts","lang":"en-US","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:d0a84d58ab22684e94a436bc142ea06bc040296c849dd1e91845dadbfe1e46b4 · sha256:8ddbf429377c232c… · /containers/cna/problemTypes/0/descriptions/0

Source references

3 source assertions
{"url":"https://jvn.jp/en/vu/JVNVU95021911/"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d0a84d58ab22684e94a436bc142ea06bc040296c849dd1e91845dadbfe1e46b4 · sha256:8ddbf429377c232c… · /containers/cna/references/2
{"url":"https://www.epson.co.uk/en_GB/faq/KA-02041/contents?loc=en-us"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d0a84d58ab22684e94a436bc142ea06bc040296c849dd1e91845dadbfe1e46b4 · sha256:8ddbf429377c232c… · /containers/cna/references/0
{"url":"https://www.epson.jp/support/misc_t/251120_oshirase.htm"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d0a84d58ab22684e94a436bc142ea06bc040296c849dd1e91845dadbfe1e46b4 · sha256:8ddbf429377c232c… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer