EPSON Printers/Scanners Legacy Root Certificate Security Advisory

Vulnerability Overview Description: Certain Epson printer and scanner products contain expired or revoked root certificates. These certificates could potentially be exploited by malicious third parties to act as counterfeit Certificate Authorities (CAs), thereby enabling eavesdropping, tampering with, or forging communications sent from the devices to external entities. Release Date: August 20, 2026 Publishing Company: Seiko Epson Corporation, Epson Sales Corporation --- Scope of Impact Confirmed Vulnerabilities: - Devices with outdated root certificates may be exploited by malicious third parties, leading to the interception, alteration, or fabrication of communication content. - No reports of active exploitation of this vulnerability have been identified to date. Affected Products: - Inkjet Printers: Models including EP-10VA, EP-306, EP-30VA, EP-315, EP-50V, etc. - Laser Printers: Models including LP-S2290LP, LP-S3290, LP-S3290PS, LP-S3590LP, LP-S3590PS, LP-S3590ZLP, LP-S4290LP, LP-S4290PS, LP-S7180LP, LP-S7180Z, LP-M8180A, LP-M818A23, LP-M8180F, LP-M818F23, LP-M8180PS, LP-S8180, LP-S8180PS, etc. - Scanners: Models including DS-1760W, DS-5100W, DS-570W, DS-571W, DS-6100W, NDNS-71000W, DS-780N, DS-787W, DS-790W, DS-900W, DS-C420W, DS-C480W, FF-680W, etc. - Large-format Printers: Models including SC-F150, SC-F550, SC-F551, SC-P6550, SC-P6550D, P6550D, SC-P8550D, SC-P8550DL, SC-P8550DM, SC-T2150, SC-T3150, T3150W, SC-T3150M, SC-T3150S, SC-T3450, SC-T3450N, SC-T3455, SC-T3455N, SC-T3750D, T3750D, SC-T3750E, SC-T5150, SC-T5150M, SC-T5150N, SC-T5450, SC-T5450M, SC-T5455, SC-T5750D, SC-T5750M, SC-T7750D, SC-T7750M, SC-T7750D, etc. --- Remediation Root Certificate Update: - Epson will release corrected root certificates to replace the outdated ones. - Users can update the root certificates by accessing the device via a web browser using the Status Confirmation or Setting Change Software (Web Config). Specific Steps: 1. Visit the Epson official website to download the latest root certificate update file. 2. Use the Web Config software and follow the on-screen prompts to perform the root certificate update. Precautions: - Web Config can be accessed via web browsers such as Edge or Safari by entering the device's IP address, allowing for status confirmation and configuration changes. --- Epson's Security Measures Security Guidelines: - Epson provides detailed security guidelines; users can obtain further information via the following links: - Precautions When Connecting Epson Products to the Network - Epson Security White Paper --- Summary Overview: Certain Epson printers and scanners contain outdated root certificates, which may be exploited by malicious third parties. Scope: Affects various models of inkjet printers, laser printers, scanners, and large-format printers. Remediation: Update the root certificates using the Web Config software to ensure secure communication.

Goal Reached Thanks to every supporter — we hit 100%!

EPSON Printers/Scanners Legacy Root Certificate Security Advisory