CVE-2025-35970
- State
- Published
- Severity
- 8.7 High
- Published
- Aug 7, 2025
- Updated
- Aug 7, 2025
- Reserved
- Jul 17, 2025
Description
On multiple products of SEIKO EPSON and FUJIFILM Corporation, the initial administrator password is easy to guess from the information available via SNMP. If the administrator password is not changed from the initial one, a remote attacker with SNMP access can log in to the product with the administrator privilege.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | jpcert |
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | jpcert |
Weaknesses
- CWE-1391 Use of weak credentials
Affected Products
| Product | Versions |
|---|---|
Multiple EPSON productSEIKO EPSON |
|
FRONTIER DX400WFUJIFILM Corporation |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.