CVE-2025-42598

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Multiple SEIKO EPSON printer drivers for Windows OS are configured with an improper access permission settings when installed or used in a language other than English. If a user is directed to place a crafted DLL file in a location of an attacker's choosing, the attacker may execute arbitrary code with SYSTEM privilege on a Windows system on which the printer driver is installed.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-276

Affected software

No affected versions have been published.

Timeline

Published: Apr 28, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-425999.8Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. Receiving a specially crafted requ CVE-2025-42608.3A vulnerability was found in zhangyanbo2007 youkefu up to 4.2.0 and classified as problematic. Affected by this issue is the function impsav CVE-2025-426008.2This vulnerability exists in Meon KYC solutions due to missing restrictions on the number of incorrect One-Time Password (OTP) attempts thro CVE-2025-426018.2This vulnerability exists in Meon KYC solutions due to insufficient server-side validation of the Captcha in certain API endpoints. A remote CVE-2025-426028.2This vulnerability exists in Meon KYC solutions due to improper handling of access and refresh tokens in certain API endpoints of authentica CVE-2025-426038.7This vulnerability exists in the Meon KYC solutions due to transmission of sensitive data in plain text within the response payloads of cert CVE-2025-426046.9This vulnerability exists in Meon KYC solutions due to debug mode is enabled in certain API endpoints. A remote attacker could exploit this CVE-2025-426059.3This vulnerability exists in Meon Bidding Solutions due to improper authorization controls on certain API endpoints for the initiation, modi CVE-2025-42615.3A vulnerability was found in GAIR-NLP factool up to 3f3914bc090b644be044b7e0005113c135d8b20f. It has been classified as critical. This affec CVE-2025-426116.5RouterOS provides various services that rely on correct verification of client and server certificates to secure confidentiality and integri CVE-2025-426158.1In affected versions, vulnerability-lookup did not track or limit failed One-Time Password (OTP) attempts during Two-Factor Authentication CVE-2025-426167.0Some endpoints in vulnerability-lookup that modified application state (e.g. changing database entries, user data, configurations, or othe