CVE-2020-28929 | BDVDB-2026-146124 Detail

Description#

Unrestricted access to the log downloader functionality in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to remotely retrieve administrative hashed credentials via the maintenance/troubleshoot.php?download=1 URI.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://blog.bssi.fr/multiple-vulnerabilities-within-epson-eps-tse-server-8/#vulnerability-1

Exploit#

No public exploit known

History#

Version 12020-12-16Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.