CVE-2025-42598 - CVE House

Back to Database

Status published High CVE-2025-42598

Multiple SEIKO EPSON printer drivers for Windows OS are configured...

8.4 CVSS

Vulnerability Description

Multiple SEIKO EPSON printer drivers for Windows OS are configured with an improper access permission settings when installed or used in a language other than English. If a user is directed to place a crafted DLL file in a location of an attacker's choosing, the attacker may execute arbitrary code with SYSTEM privilege on a Windows system on which the printer driver is installed.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-42598

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from SEIKO EPSON CORPORATION

View All →

Stack-based buffer overflow vulnerability exists in SEIKO EPSON Web Config....

EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector...

Insecure initial password configuration issue in SEIKO EPSON Web Config...

Improper input validation vulnerability in SEIKO EPSON printer Web Config...

Cross-site request forgery (CSRF) vulnerability in SEIKO EPSON printers/network interface...

Affected Vendor

SEIKO EPSON CORPORATION

View all reports →

Affected Software

SEIKO EPSON printer drivers for Windows OS

Vulnerable Versions:

see the information provided by SEIKO EPSON CORPORATION.

Timeline

Official Publish: April 28th, 2025

Last Modified: April 28th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1222 File and Directory Permissions Modification

Defense Evasion

T1078 Valid Accounts

T1574 Hijack Execution Flow

Privilege Escalation

T1021 Remote Services

Lateral Movement

T1005 Data from Local System