Accessing Epson POS Printers

Epson POS printers which are network-enabled have an inbuilt webserver to allow configuration of the device. The default username to access the webserver is usually epson, but depending on the firmware in the device, the default password is either epson or the serial number. Ostensibly this is to prevent network attacks against the device since the attacker will not have access to the physical unit to read the serial number. However the serial number can be retrieved using the firmware upgrade tool.

1. Download the firmware upgrade tool for the model in question, or try downloading any firmware upgrade tool for a similar model.

2. Follow the tool's wizard until it shows the printer model and then choose the NET button.

   The tool will pause while it discovers printers on the network.

3. Click on the device and choose Communications Test.

   After a few moments it will show the serial number in the left-hand pane; expand the Printer Information section.

Since the point of using the serial number as a password is to secure the device out-of-the-box and confound an adversary who is on the network, and the serial number can be easily retrieved from the unit, best practice would be to change the password upon deployment.