Improper Access Permissions in SEIKO EPSON Printer Drivers for Windows

CVE-2025-42598

What is CVE-2025-42598?

Multiple printer drivers from SEIKO EPSON for Windows operating systems have been identified with improper access permission settings when installed in non-English languages. This misconfiguration allows an attacker to place a maliciously crafted DLL file in a location of their choosing, potentially enabling arbitrary code execution with SYSTEM privileges on the affected Windows system. Users are advised to ensure their printer drivers are configured correctly and to monitor for any suspicious file operations.

References