Vulnerability Description
On multiple products of SEIKO EPSON and FUJIFILM Corporation, the initial administrator password is easy to guess from the information available via SNMP. If the administrator password is not changed from the initial one, a remote attacker with SNMP access can log in to the product with the administrator privilege.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://global.fujifilm.com/en/news/hq/697e
- https://jvn.jp/en/vu/JVNVU91363496/
- https://www.epson.jp/support/misc_t/250807_oshirase.htm
FAQ
What is CVE-2025-35970?
CVE-2025-35970 is a vulnerability with a CVSS score of 7.5 (HIGH). On multiple products of SEIKO EPSON and FUJIFILM Corporation, the initial administrator password is easy to guess from the information available via SNMP. If the administrator password is not changed ...
How severe is CVE-2025-35970?
CVE-2025-35970 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-35970?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.