CVE-2018-18960: Epson Workforce Wf-2861 Firmware

Medium severity, CVSS 5.9. EPSS: 0.9% chance of exploitation in the next 30 days.

An issue was discovered on Epson WorkForce WF-2861 10.48 LQ22I3, 10.51.LQ20I6 and 10.52.LQ17IA devices. They use SNMP to find certain devices on the network, but the default version is v2c, allowing an amplification attack.

Affected products

• Epson Epson Workforce Wf-2861 Firmware: version 10.48_lq22i3 only; version 10.51.lq20i6 only; version 10.52.lq17ia only

Published 2018-12-24. Last modified 2026-06-17.