CVE-2025-64310

State: Published
Severity: 9.3 Critical
Published: Nov 21, 2025
Updated: Dec 23, 2025
Reserved: Oct 30, 2025

Description

EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts. An administrative user's password may be identified through a brute force attack.

Scores

CVSS	Score	Vector	Source
4.0	9.3 Critical	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	jpcert
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	jpcert

Weaknesses

CWE-307 Improper restriction of excessive authentication attempts

Affected Products

Product	Versions
EPSON WebConfig for SEIKO EPSON Projector ProductsSEIKO EPSON CORPORATION	see the information provided by the vendorAffected
Epson Web Control for SEIKO EPSON Projector ProductsSEIKO EPSON CORPORATION	see the information provided by the vendorAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.