Detections
Analytics
EPSON Printers Uncontrolled Search Path Element (CVE-2020-6091)
critical Tenable OT Security Plugin ID 505072
Synopsis
The remote OT asset is affected by a vulnerability.Description
An exploitable authentication bypass vulnerability exists in the ESPON Web Control functionality of Epson EB-1470Ui MAIN: 98009273ESWWV107 MAIN2: 8X7325WWV303. A specially crafted series of HTTP requests can cause authentication bypass resulting in information disclosure. An attacker can send an HTTP request to trigger this vulnerability.This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.
Solution
Refer to the vendor advisory.See Also
https://epson.com/support/wa00907
https://talosintelligence.com/vulnerability_reports/TALOS-2020-1011
Plugin Details
Severity: Critical
ID: 505072
File Name: tenable_ot_epson_CVE-2020-6091.nasl
Version: 1.2
Type: remote
Family: Tenable.ot
Published: 2/5/2026
Updated: 2/6/2026
Supported Sensors: Tenable OT Security
Risk Information
VPR
Risk Factor: Medium
Score: 5.2
CVSS v2
Risk Factor: Medium
Base Score: 6.4
Temporal Score: 4.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N
CVSS Score Source: CVE-2020-6091
CVSS v3
Risk Factor: Critical
Base Score: 9.1
Temporal Score: 7.9
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:epson:eb-1470ui_firmware:-
Required KB Items: Tenable.ot/EPSON
Exploit Ease: No known exploits are available
Patch Publication Date: 5/22/2020
Vulnerability Publication Date: 5/22/2020
Reference Information
CVE: CVE-2020-6091