CVE-2018-0689

mediumpriority · track · 36EPSS 0.016 · 76 %ileEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

1.64% (76th) EPSS

CVSS 6.8 · medium

Is it mine?

59 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · nvd

EPSS · scored 2026-10-26

HTTP header injection vulnerability in SEIKO EPSON printers and scanners (DS-570W firmware versions released prior to 2018 March 13, DS-780N firmware versions released prior to 2018 March 13, EP-10VA firmware versions released prior to 2017 September 4, EP-30VA firmware versions released prior to 2017 June 19, EP-707A firmware versions released prior to 2017 August 1, EP-708A firmware versions released prior to 2017 August 7, EP-709A firmware versions released prior to 2017 June 12, EP-777A firmware versions released prior to 2017 August 1, EP-807AB/AW/AR firmware versions released prior to 2017 August 1, EP-808AB/AW/AR firmware versions released prior to 2017 August 7, EP-879AB/AW/AR firmware versions released prior to 2017 June 12, EP-907F firmware versions released prior to 2017 August 1, EP-977A3 firmware versions released prior to 2017 August 1, EP-978A3 firmware versions released prior to 2017 August 7, EP-979A3 firmware versions released prior to 2017 June 12, EP-M570T firmware versions released prior to 2017 September 6, EW-M5071FT firmware versions released prior to 2017 November 2, EW-M660FT firmware versions released prior to 2018 April 19, EW-M770T firmware versions released prior to 2017 September 6, PF-70 firmware versions released prior to 2018 April 20, PF-71 firmware versions released prior to 2017 July 18, PF-81 firmware versions released prior to 2017 September 14, PX-048A firmware versions released prior to 2017 July 4, PX-049A firmware versions released prior to 2017 September 11, PX-437A firmware versions released prior to 2017 July 24, PX-M350F firmware versions released prior to 2018 February 23, PX-M5040F firmware versions released prior to 2017 November 20, PX-M5041F firmware versions released prior to 2017 November 20, PX-M650A firmware versions released prior to 2017 October 17, PX-M650F firmware versions released prior to 2017 October 17, PX-M680F firmware versions released prior to 2017 June 29, PX-M7050F firmware versions released prior to 2017 October 13, PX-M7050FP firmware versions released prior to 2017 October 13, PX-M7050FX firmware versions released prior to 2017 November 7, PX-M7070FX firmware versions released prior to 2017 April 27, PX-M740F firmware versions released prior to 2017 December 4, PX-M741F firmware versions released prior to 2017 December 4, PX-M780F firmware versions released prior to 2017 June 29, PX-M781F firmware versions released prior to 2017 June 27, PX-M840F firmware versions released prior to 2017 November 16, PX-M840FX firmware versions released prior to 2017 December 8, PX-M860F firmware versions released prior to 2017 October 25, PX-S05B/W firmware versions released prior to 2018 March 9, PX-S350 firmware versions released prior to 2018 February 23, PX-S5040 firmware versions released prior to 2017 November 20, PX-S7050 firmware versions released prior to 2018 February 21, PX-S7050PS firmware versions released prior to 2018 February 21, PX-S7050X firmware versions released prior to 2017 November 7, PX-S7070X firmware versions released prior to 2017 April 27, PX-S740 firmware versions released prior to 2017 December 3, PX-S840 firmware versions released prior to 2017 November 16, PX-S840X firmware versions released prior to 2017 December 8, PX-S860 firmware versions released prior to 2017 December 7) may allow a remote attackers to lead a user to a phishing site or execute an arbitrary script on the user's web browser.

cvss

Technical severity, 0–10. One row per scoring source.

8.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.8–8.8

v2.06.8mediumAV:N/AC:M/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 8.6 · impact 6.4

v3.08.8highCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 2.8 · impact 5.9

v3.08.1highCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-113USprimary

affected products (59)

Products and version ranges known to be affected.

SEIKO EPSON CORPORATION SEIKO EPSON printers and scanners≤ (DS-570W firmware versions released prior to 2018 March 13, DS-780N firmware versions released prior to 2018 March 13, EP-10VA firmware versions released prior to 2017 September 4, EP-30VA firmware versions released prior to 2017 June 19, EP-707A firmware versions released prior to 2017 August 1, EP-708A firmware versions released prior to 2017 August 7, EP-709A firmware versions released prior to 2017 June 12, EP-777A firmware versions released prior to 2017 August 1, EP-807AB/AW/AR firmware versions released prior to 2017 August 1, EP-808AB/AW/AR firmware versions released prior to 2017 August 7, EP-879AB/AW/AR firmware versions released prior to 2017 June 12, EP-907F firmware versions released prior to 2017 August 1, EP-977A3 firmware versions released prior to 2017 August 1, EP-978A3 firmware versions released prior to 2017 August 7, EP-979A3 firmware versions released prior to 2017 June 12, EP-M570T firmware versions released prior to 2017 September 6, EW-M5071FT firmware versions release ...[truncated*]enisa_euvdEU
epson ds-570w firmware< 2018-03-13nvdUScpe:2.3:o:epson:ds-570w_firmware:*:*:*:*:*:*:*:*
epson ds-780n firmware< 2018-03-13nvdUScpe:2.3:o:epson:ds-780n_firmware:*:*:*:*:*:*:*:*
epson ep-10va firmware< 2017-09-04nvdUScpe:2.3:o:epson:ep-10va_firmware:*:*:*:*:*:*:*:*
epson ep-30va firmware< 2017-06-19nvdUScpe:2.3:o:epson:ep-30va_firmware:*:*:*:*:*:*:*:*
epson ep-707a firmware< 2017-08-01nvdUScpe:2.3:o:epson:ep-707a_firmware:*:*:*:*:*:*:*:*
epson ep-708a firmware< 2017-08-07nvdUScpe:2.3:o:epson:ep-708a_firmware:*:*:*:*:*:*:*:*
epson ep-709a firmware< 2017-06-12nvdUScpe:2.3:o:epson:ep-709a_firmware:*:*:*:*:*:*:*:*
epson ep-777a firmware< 2017-08-01nvdUScpe:2.3:o:epson:ep-777a_firmware:*:*:*:*:*:*:*:*
epson ep-807ab firmware< 2017-08-01nvdUScpe:2.3:o:epson:ep-807ab_firmware:*:*:*:*:*:*:*:*
epson ep-807ar firmware< 2017-08-01nvdUScpe:2.3:o:epson:ep-807ar_firmware:*:*:*:*:*:*:*:*
epson ep-807aw firmware< 2017-08-01nvdUScpe:2.3:o:epson:ep-807aw_firmware:*:*:*:*:*:*:*:*
epson ep-808ab firmware< 2017-08-07nvdUScpe:2.3:o:epson:ep-808ab_firmware:*:*:*:*:*:*:*:*
epson ep-808ar firmware< 2017-08-07nvdUScpe:2.3:o:epson:ep-808ar_firmware:*:*:*:*:*:*:*:*
epson ep-808aw firmware< 2017-08-07nvdUScpe:2.3:o:epson:ep-808aw_firmware:*:*:*:*:*:*:*:*
epson ep-879ab firmware< 2017-06-12nvdUScpe:2.3:o:epson:ep-879ab_firmware:*:*:*:*:*:*:*:*
epson ep-879ar firmware< 2017-06-12nvdUScpe:2.3:o:epson:ep-879ar_firmware:*:*:*:*:*:*:*:*
epson ep-879aw firmware< 2017-06-12nvdUScpe:2.3:o:epson:ep-879aw_firmware:*:*:*:*:*:*:*:*
epson ep-907f firmware< 2017-08-01nvdUScpe:2.3:o:epson:ep-907f_firmware:*:*:*:*:*:*:*:*
epson ep-977a3 firmware< 2017-08-01nvdUScpe:2.3:o:epson:ep-977a3_firmware:*:*:*:*:*:*:*:*

showing 20 of 59

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd NVD CVE.org MITRE

published 2019-01-09modified 2026-06-17

related (218)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2023-25690US	critical9.8	84.5% (100th)	Exploit	2023-03-07
Some mod_proxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack. Configurations are affected when mod_proxy is enabled a…
CVE-2016-8024US	high8.1	8.67% (95th)	Exploit	2017-03-14
Improper neutralization of CRLF sequences in HTTP headers vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote unauthenticated attack…
CVE-2002-0006US	high7.5	8.09% (95th)	Exploit	2002-06-25
XChat 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3, allows remote attackers to execute arbitrary IRC commands as other clients via encoded characters in a…
CVE-2022-37436US	medium5.3	55.9% (99th)	—	2023-01-17
Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. I…
CVE-2019-25101US	critical9.8	0.86% (58th)	—	2023-02-04
A vulnerability classified as critical has been found in OnShift TurboGears 1.0.11.10. This affects an unknown part of the file turbogears/controllers.py of the component HTTP Head…

+213 more

references (6)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan