PT-2025-32258 · Seiko Epson+1 · Seiko Epson Products+1

Published 2025-08-07 · Updated 2026-02-26 · CVE-2025-35970

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SEIKO EPSON and FUJIFILM Corporation products (affected versions not specified)

Description The initial administrator password for multiple products is easily guessable from information available via Simple Network Management Protocol (SNMP). If the administrator password is not changed from the initial setting, a remote attacker with SNMP access can gain administrator privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1391

Related Identifiers

CVE-2025-35970

Affected Products

Fujifilm Products

Seiko Epson Products

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2025-35970 · Security Note
• https://jvn.jp/en/vu/JVNVU91363496 · Note
• https://global.fujifilm.com/en/news/hq/697e · Note
• https://t.me/CVEtracker/29425 · Telegram Post
• https://twitter.com/offseq/status/1953358111823007764 · Twitter Post
• https://twitter.com/Thendcrack/status/1953768875205480863 · Twitter Post
• https://epson.jp/support/misc_t/250807_oshirase.htm · Note
• https://t.me/cveNotify/131203 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1953372897893916808 · Twitter Post
• https://twitter.com/cracbot/status/1955222784650481804 · Twitter Post
• https://twitter.com/CVEnew/status/1953333773921075368 · Twitter Post
• https://twitter.com/J4ck3LSyN/status/2026822045527585045 · Twitter Post