Easily Guessable Initial Administrator Password Vulnerability in SEIKO EPSON and FUJIFILM Products

CVE-2025-35970

What is CVE-2025-35970?

Multiple products from SEIKO EPSON and FUJIFILM Corporation exhibit a vulnerability where the initial administrator password is publicly accessible and easily guessable via SNMP (Simple Network Management Protocol). If users neglect to change the default password, a remote attacker with SNMP access can potentially gain unauthorized administrator privileges, leading to significant security risks. Organizations utilizing these products are strongly advised to modify the initial password to mitigate this vulnerability.

References