Multiple Seiko Epson Printers And Scanners
Monthly
Revoked root certificates embedded in multiple Seiko Epson printers and scanners expose device communications to interception via man-in-the-middle attacks. Affected products continue to trust certificates that have been revoked, violating the chain-of-trust model defined by CWE-296, and allowing a suitably positioned attacker to decrypt or read transmitted data. No active exploitation has been confirmed (no CISA KEV listing), and the high attack complexity required for network positioning limits real-world exposure, but confidentiality of printer/scanner communications - potentially including scanned document content - is at risk.
Revoked root certificates embedded in multiple Seiko Epson printers and scanners expose device communications to interception via man-in-the-middle attacks. Affected products continue to trust certificates that have been revoked, violating the chain-of-trust model defined by CWE-296, and allowing a suitably positioned attacker to decrypt or read transmitted data. No active exploitation has been confirmed (no CISA KEV listing), and the high attack complexity required for network positioning limits real-world exposure, but confidentiality of printer/scanner communications - potentially including scanned document content - is at risk.