Epson Web Config CVE-2025-66635

Exploitation requires an authenticated session to the targeted Epson device's Web Config administrative interface (the description states a 'logged-in user' and the CVSS vector sets PR:H); without valid Web Config credentials the flaw cannot be reached. Once authenticated, the attacker triggers the stack-based buffer overflow by supplying specially crafted data to a vulnerable input field over the network (AV:N, AC:L, no user interaction). The key limiting factor is this prior-credential requirement, which confines realistic risk to insiders, credential-compromise follow-on, or environments where Web Config is left on default/weak credentials; specific affected models and firmware versions must be confirmed against Epson's advisory.

This is a moderate-priority issue rather than a drop-everything emergency, driven mainly by the authentication barrier. The vendor-supplied CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:H/UI:N, VC:H/VI:H/VA:H) scores 8.6 and indicates a network-reachable flaw with low attack complexity and full confidentiality/integrity/availability impact on the device, but the PR:H metric is decisive: exploitation requires high privileges, consistent with the description's 'logged-in user' of Web Config (the embedded administrative interface of Epson printers/scanners). An attacker who already holds valid Web Config credentials gaining code execution is a meaningful privilege-to-RCE escalation, but it is not remote-unauthenticated compromise. No EPSS score, KEV listing, or public POC was provided in the input, so there is no signal of active or probable exploitation - the 8.6 reflects impact severity, not demonstrated real-world risk. There are no conflicting signals here: both the CVSS vector and the description agree that prior authentication is needed. The primary uncertainty is scope of affected products/versions, which the description defers entirely to the vendor references and is not enumerated in the provided data.

An attacker who has obtained or been granted login credentials to an Epson device's Web Config interface submits specially crafted input to a vulnerable configuration field over the network, overflowing a stack buffer and executing arbitrary code on the device. No public exploit was identified in the provided data, and the attack is low-complexity once authenticated but requires that logged-in administrative access up front.