JVNDB-2025-010972

Multiple SEIKO EPSON products use weak initial passwords

Multiple SEIKO EPSON products contain the following vulnerability.

• Use of weak credentials (CWE-1391) - CVE-2025-35970


• The initial administrator password is easy to guess from the information available via SNMP

SEIKO EPSON CORPORATION reported this vulnerability to JPCERT/CC to notify users of its solution through JVN.

SEIKO EPSON CORPORATION

• (Multiple Products)

A wide range of products are affected. As for the details of affected product names and model numbers, refer to the information provided by the respective vendors in [Vendor Information].

If the administrator password is not changed from the initial one, a remote attacker with SNMP access can log in to the product with the administrator privilege.

[Apply the Workaround]
Applying the following workarounds to mitigate the impact of this vulnerability.

• Change the administrator password, and manage it appropriately


• Connect the product to a firewall-protected network


• Connect the product to a network with a private IP address

For the details of workarounds, refer to the information provided by the respective vendors in [Vendor Information].

SEIKO EPSON CORPORATION

• SEIKO EPSON CORPORATION : Regarding the Vulnerability Allowing Administrator Login via SNMP Access to Serial Numbers of Printers, Scanners, and Network Interface Products (in Japanese)

Fujifilm Corporation

• Fujifilm Corporation : FUJIFILM Corporation website

1. Use of Weak Credentials(CWE-1391) [Other]

1. CVE-2025-35970

1. JVN : JVNVU#91363496

• [2025/08/08]
    Web page was published