CVE-2025-35970 Hardcoded credentials in FRONTIER DX400W
Remote attackers can guess the default admin password via SNMP to gain administrative access to SEIKO EPSON and FUJIFILM printers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-35970?
CVE-2025-35970 is a high-severity vulnerability in FUJIFILM Corporation FRONTIER DX400W, published on 7 Aug 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
On multiple products of SEIKO EPSON and FUJIFILM Corporation, the initial administrator password is easy to guess from the information available via SNMP. If the administrator password is not changed from the initial one, a remote attacker with SNMP access can log in to the product with the administrator privilege.
Weakness: CWE-1391
Which versions are affected by CVE-2025-35970?
How do I fix CVE-2025-35970?
No fix has been published for CVE-2025-35970 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-35970 being exploited?
There is no known exploitation of CVE-2025-35970 in the wild and no public exploit code.
Sources
Also known as GHSA-w4q5-wvrc-8px6.