CVE-2025-35970

On multiple products of SEIKO EPSON and FUJIFILM Corporation, the initial administrator password is easy to guess from the information available via SNMP. If the administrator password is not changed from the initial one, a remote attacker with SNMP access can log in to the product with the administrator privilege.

Score

CVSS 4.0 8.7 High

Status

Deferred - vultures@jpcert.or.jp

Published

2025-08-07

Last modified

2025-08-07

Weaknesses

CWE-1391

Affected products

• Frontier Dx400w (Fujifilm Corporation)
• Multiple Epson Product (Seiko Epson)

References

• https://global.fujifilm.com/en/news/hq/697e
• https://jvn.jp/en/vu/JVNVU91363496/
• https://www.epson.jp/support/misc_t/250807_oshirase.htm