Accessing Epson POS PrintersEpson POS printers which are network-enabled have an inbuilt webserver to allow configuration of the device. The default username to access the webserver is usually epson, but depending on the firmware in the device, the default password is either epson or the serial number. Ostensibly this is to prevent network attacks against the device since the attacker will not have access to the physical unit to read the serial number. However the serial number can be retrieved using the firmware upgrade tool.
Since the point of using the serial number as a password is to secure the device out-of-the-box and confound an adversary who is on the network, and the serial number can be easily retrieved from the unit, best practice would be to change the password upon deployment. |