An unauthenticated buffer overflow in the EPSON L14150 FL27PB printer's network printing service poses a risk of remote code execution.

This is a buffer overflow vulnerability within the RAW Printing Service (JetDirect) listening on TCP port 9100. It allows a remote, unauthenticated attacker to send specially crafted packets to cause a service crash or execute arbitrary code.

Exploitation of this vulnerability can lead to printer downtime (Denial of Service) or unauthorized control over the printing device, which could be used as an entry point into the internal network. The CVSS score of 7.5 reflects the high risk posed to network-connected hardware.

Immediate Action: Check the official EPSON support portal for firmware updates addressing this issue; if no update is available, restrict access to TCP port 9100 to only trusted IP addresses.

Proactive Monitoring: Monitor network traffic for unusual activity directed at port 9100 and investigate any unexpected printer reboots or service outages.

Compensating Controls: Use network segmentation to isolate printer management interfaces and printing services from the primary corporate network to prevent unauthorized external access.

Public Exploit Available: Yes — a public proof-of-concept exists in a GitHub repository (J4ck3LSyN-Gen2/CVE-2026-39047).

Due to the availability of a public proof-of-concept, this vulnerability should be treated with high urgency. Network administrators should immediately restrict access to the affected printer's port 9100 and apply firmware updates as soon as they are made available by the vendor.