VulnerabilityDeferred

CVE-2026-73542

A man-in-the-middle attack may allow an attacker to obtain communication data transmitted by the product.

MEDIUM 6.3EPSS 0.11%

Does this matter?

Lower severity and a low EPSS score (0.11%). Track it; it rarely justifies an emergency change on its own.

Description

Multiple SEIKO EPSON printers and scanners contain revoked root certificates. A man-in-the-middle attack may allow an attacker to obtain communication data transmitted by the product. As for the details of the affected products and versions, refer to the vendor's information.

CVSS 4.0: 6.3 MEDIUMCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.11% probability · 1th percentile
CISA KEV: Not listed
Weakness: CWE-296
Source: vultures@jpcert.or.jp

References

https://jvn.jp/en/vu/JVNVU91609598/
https://www.epson.jp/news/info/a-security202608.htm

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.