CVE-2020-28931: Epson Eps Tse Server 8 Firmware

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Lack of an anti-CSRF token in the entire administrative interface in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to force an administrator to execute external POST requests by visiting a malicious website.

Affected products

• Epson Eps Tse Server 8 Firmware: version 21.0.11 only

Published 2020-12-16. Last modified 2026-06-17.