CVE-2020-28929: Epson Eps Tse Server 8 Firmware

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Unrestricted access to the log downloader functionality in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to remotely retrieve administrative hashed credentials via the maintenance/troubleshoot.php?download=1 URI.

Affected products

• Epson Eps Tse Server 8 Firmware: version 21.0.11 only

Published 2020-12-16. Last modified 2026-06-17.