Medium severity5.9NVD Advisory· Published Dec 24, 2018· Updated Jun 17, 2026
CVE-2018-18960
CVE-2018-18960
Description
An issue was discovered on Epson WorkForce WF-2861 10.48 LQ22I3, 10.51.LQ20I6 and 10.52.LQ17IA devices. They use SNMP to find certain devices on the network, but the default version is v2c, allowing an amplification attack.
Affected products
4cpe:2.3:o:epson:epson_workforce_wf-2861_firmware:10.48_lq22i3:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:epson:epson_workforce_wf-2861_firmware:10.48_lq22i3:*:*:*:*:*:*:*
- cpe:2.3:o:epson:epson_workforce_wf-2861_firmware:10.51.lq20i6:*:*:*:*:*:*:*
- cpe:2.3:o:epson:epson_workforce_wf-2861_firmware:10.52.lq17ia:*:*:*:*:*:*:*
- Range: 10.48 LQ22I3, 10.51.LQ20I6 and 10.52.LQ17IA
Patches
Vulnerability mechanics
References
1- github.com/epistemophilia/CVEs/blob/master/Epson-WorkForce-WF2861/CVE-2018-18960/poc-cve-2018-18960.pynvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.