CVE-2025-42598

Published Apr 28, 2025

Last updated 2 months ago

Overview

Description
Multiple SEIKO EPSON printer drivers for Windows OS are configured with an improper access permission settings when installed or used in a language other than English. If a user is directed to place a crafted DLL file in a location of an attacker's choosing, the attacker may execute arbitrary code with SYSTEM privilege on a Windows system on which the printer driver is installed.
Source
vultures@jpcert.or.jp
NVD status
Awaiting Analysis

Risk scores

CVSS 4.0

Type
Secondary
Base score
8.4
Impact score
-
Exploitability score
-
Vector string
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity
HIGH

CVSS 3.1

Type
Secondary
Base score
7.8
Impact score
5.9
Exploitability score
1.8
Vector string
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity
HIGH

Weaknesses

vultures@jpcert.or.jp
CWE-276

Social media

Hype score
Not currently trending
  1. CVE-2025-42598 (CVSS:8.4, HIGH) is Awaiting Analysis. Multiple SEIKO EPSON printer drivers for Windows OS are configured with an improper access permission settings when inst..https://t.co/W0I9kjb0YK #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    @cracbot

    3 May 2025

    4 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. 🚨 High-severity Windows vulnerability found in SEIKO EPSON printer drivers (CVE-2025-42598). System-level RCE possible due to incorrect permissions. Details & mitigations 👉 https://t.co/kZxEyMpvir #CyberSecurity #Infosec #Vulnerability #CVE202542598

    @threatsbank

    29 Apr 2025

    7 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  3. SEIKO EPSONのWindows用プリンタードライバーに重大な脆弱性(CVE-2025-42598)が発見された。 本脆弱性は非英語環境でインストールされたドライバーに影響し、DLLハイジャックによりSYSTEM権限で任意コードを実行可

    @yousukezan

    28 Apr 2025

    568 Impressions

    0 Retweets

    3 Likes

    4 Bookmarks

    0 Replies

    0 Quotes

  4. 🚨 CVE-2025-42598 🔴 HIGH (7.8) 🏢 SEIKO EPSON CORPORATION - SEIKO EPSON printer drivers for Windows OS 🏗️ see the information provided by SEIKO EPSON CORPORATION. 🔗 https://t.co/zQS6mQmqyZ 🔗 https://t.co/vReccJYRLG #CyberCron #VulnAlert #InfoSec https://t.co/5yT

    @cybercronai

    28 Apr 2025

    6 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  5. CVE-2025-42598 Multiple SEIKO EPSON printer drivers for Windows OS are configured with an improper access permission settings when installed or used in a language other than English… https://t.co/gpm4wAfE75

    @CVEnew

    28 Apr 2025

    506 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  6. [CVE-2025-42598: HIGH] SEIKO EPSON printer drivers for Windows have a security flaw allowing attackers to execute code on a system if a user is tricked into placing a malicious DLL file.#cve,CVE-2025-42598,#cybersecurity https://t.co/fKuO5PnjCt https://t.co/JB1nDVaptc

    @CveFindCom

    28 Apr 2025

    88 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes