What is the CVSS score of CVE-2026-39047?

CVE-2026-39047 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.2%.

Which versions of EPSON L14150 are affected by CVE-2026-39047?

EPSON L14150 printers running firmware FL27PB are vulnerable to CVE-2026-39047, a remote unauthenticated buffer overflow with publicly available exploit code that can crash the device and disrupt…

How to fix or mitigate CVE-2026-39047?

Within 24 hours: Inventory all EPSON L14150 printers in your environment and document their network locations. Within 7 days: Implement network-level controls to restrict access to TCP port 9100 (RAW/JetDirect protocol) using firewall rules or network segmentation, allowing print access only from authorized print servers or VLAN subnets; disable direct port 9100 access on the printer administrative interface if available. Within 30 days: Monitor EPSON security advisories for a firmware update to address FL27PB; establish a testing and deployment process for firmware updates when available.

EPSON L14150 CVE-2026-39047

EUVD-2026-31118 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-05-20 mitre

GHSA-5fw2-hx45-87c3

RCE Buffer Overflow Stack Overflow N A

7.5

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

vuln.today AI

7.5 HIGH

Unauthenticated network reach to port 9100 with no interaction (AV:N/AC:L/PR:N/UI:N); scored A:H only because evidence (SSVC partial, availability-only vector) supports a crash, not confirmed RCE.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (mitre).

CVSS VectorVendor: mitre

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 23, 2026 - 17:35 vuln.today

CVE Published

May 20, 2026 - 00:00 cve.org

HIGH 7.5

CVE Published

May 20, 2026 - 00:00 nvd

UNKNOWN (no severity yet)

DescriptionCVE.org

Buffer Overflow vulnerability in EPSON L14150 FL27PB allows a remote attacker to execute arbitrary code via the RAW Printing Service (JetDirect) on TCP port 9100

AnalysisAI

Stack-based buffer overflow in the EPSON L14150 (firmware FL27PB) is reachable remotely and unauthenticated through the RAW/JetDirect print service on TCP port 9100, letting an attacker crash or potentially execute code on the device. The MITRE description claims arbitrary code execution, though the CVSS vector scores only availability impact (C:N/I:N/A:H) and CISA SSVC rates technical impact as 'partial', so the practical outcome is more consistent with a denial-of-service/device crash than confirmed RCE. Publicly available exploit code exists (POC on GitHub/gist), but it is not in CISA KEV and EPSS is low (0.19%).

Technical ContextAI

Port 9100 exposes the RAW printing protocol (commonly branded HP JetDirect/AppSocket), a bidirectional TCP channel that forwards raw PDL/PJL data straight to the printer's firmware with no session-layer authentication. CWE-121 (Stack-based Buffer Overflow) identifies the root cause: firmware parsing of the inbound RAW stream copies attacker-controlled data into a fixed-size stack buffer without bounds checking, allowing the saved return address/adjacent stack data to be overwritten. On embedded printer RTOS firmware this typically yields a service crash or reboot, and - depending on memory protections - could permit control-flow hijack. The supplied CPE string (cpe:2.3:a:n/a:n/a:*) is a placeholder and carries no usable product identification; the affected product is derived solely from the CVE description (EPSON L14150, firmware revision FL27PB).

RemediationAI

No vendor-released patch identified at time of analysis, and no fixed firmware version is cited in the available data, so remediation centers on compensating controls. The most effective control is to block or filter TCP port 9100 at the network layer and restrict RAW/JetDirect access to a dedicated print-server VLAN or trusted management subnet - trade-off: clients that print directly to the device via raw socket must be redirected through a spooler (IPP/LPD via a print server), which may require driver/queue reconfiguration. Where the RAW service is not required, disable the AppSocket/Port 9100 protocol in the printer's network settings and use IPP over TLS instead, which removes the exposed parser entirely at the cost of RAW-dependent workflows. Monitor the EPSON support site for an FL27PB successor firmware and apply it once released. Consult NVD (https://nvd.nist.gov/vuln/detail/CVE-2026-39047) and VulDB (https://vuldb.com/vuln/364897) for updates; public POC material is at https://github.com/AzhariRamadhan/CVE-PORT-9100.