Improper Access Permissions in SEIKO EPSON Printer Drivers for Windows
CVE-2025-42598

8.4HIGH

Key Information:

Vendor

Seiko Epson Corporation

Status
Seiko Epson Printer Drivers For Windows Os
Vendor
CVE Published:
28 April 2025

What is CVE-2025-42598?

Multiple printer drivers from SEIKO EPSON for Windows operating systems have been identified with improper access permission settings when installed in non-English languages. This misconfiguration allows an attacker to place a maliciously crafted DLL file in a location of their choosing, potentially enabling arbitrary code execution with SYSTEM privileges on the affected Windows system. Users are advised to ensure their printer drivers are configured correctly and to monitor for any suspicious file operations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

SEIKO EPSON printer drivers for Windows OS see the information provided by SEIKO EPSON CORPORATION.

References

https://www.epson.co.uk/en_GB/faq/KA-01993/contents?loc=e...
https://www.epson.jp/support/misc_t/250428_oshirase.htm
https://www2.epson.jp/support/misc_t/windrv_productlist.pdf

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.