CVE-2025-66635CWE-121

CVE-2025-66635

High · published December 16, 2025

CVSS v3.0
7.2
EPSS
1%
Percentile
44.2
In the wild
Unconfirmed
What it is

⚡ A logged-in user can unleash chaos with just a crafted input! This stack-based buffer overflow in SEIKO EPSON Web Config could allow arbitrary code execution, putting your system at risk. 🔥 Think of it like a restaurant where a diner can sneak in a misleading order—if the kitchen isn’t careful, they might prepare a dish that’s completely off the rails and potentially harmful! If an attacker successfully exploits this vulnerability, they could run any code they choose, which means they might access sensitive data, modify settings, or even take control of the entire system. This unintended kitchen chaos could lead to data loss or even a complete system compromise, and that's absolutely devastating!

Put simply

Think of it like a restaurant where a diner can sneak in a misleading order—if the kitchen isn’t careful, they might prepare a dish that’s completely off the rails and potentially harmful! The vulnerability arises from a stack-based buffer overflow that allows a logged-in user to input specially crafted data, which overwrites adjacent memory regions and leads to arbitrary code execution.

What to do

If an attacker successfully exploits this vulnerability, they could run any code they choose, which means they might access sensitive data, modify settings, or even take control of the entire system. This unintended kitchen chaos could lead to data loss or even a complete system compromise, and that's absolutely devastating! To mitigate this risk, patch your SEIKO EPSON Web Config to the latest version immediately—check with the vendor for the specific update. Additionally, restrict access to trusted users only and monitor input data closely to prevent any malicious attempts. You’ve got this! With these steps, you’ll stop this vulnerability in its tracks and keep your systems secure! 🛡️

The record
Technical detail
CVSS v3.0
7.2 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00534 · 44.2th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2025-12-16T12:15Z
References (3)
EPSS history
Timeline
  • 16 DEC 06:59Z
    Stack-based buffer overflow vulnerability exists in SEIKO EPSON Web Config
    cvelistv5