Multiple SEIKO EPSON printers and scanners keep already revoked root certificates

Certain SEIKO EPSON printers and scanners have been found to keep revoked root certificates within their trusted certificate stores. Retaining revoked certificates can cause these devices to trust entities that should no longer be trusted, potentially weakening the security of encrypted communications or authentication mechanisms that depend on certificate validation. No specific affected versions or detailed technical information are provided.

The presence of revoked root certificates in these devices may allow attackers to exploit trust relationships that should have been invalidated, possibly enabling man-in-the-middle attacks or unauthorized access if certificate validation is bypassed. However, no known exploits are reported, and the exact impact depends on how these certificates are used by the devices and their environment.

No patch or remediation information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should be cautious about the security implications of using these devices in sensitive environments and monitor vendor communications for updates.