PT-2025-54638 · Epson · Epson Printer Controller Installer

Carlos Garrido · Published 2025-06-23 · Updated 2026-02-24 · CVE-2025-4960

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Epson printer and scanner firmware Web Installer Epson printer driver installer

Description The Epson Web Installer for printer and scanner firmware and the com.epson.InstallNavi.helper tool, included with the Epson printer driver installer, have a security issue. The vulnerability stems from a lack of authentication for a critical function and flaws in the implementation of the com.epson.InstallNavi.helper tool. Specifically, the tool does not properly authenticate clients over the XPC protocol and incorrectly enforces macOS’s authorization model. It uses overly permissive custom rights registered in the system’s authorization database (/var/db/auth.db). These rights can be requested and granted by the authorization daemon to any local user, regardless of privilege level. This allows an attacker to perform privileged operations, such as executing arbitrary commands or installing system components, without administrative credentials.

Recommendations Apply updates to the Epson printer and scanner firmware Web Installer. Update the Epson printer driver installer.

Fix

LPE

Missing Authentication

Incorrect Authorization

Weakness Enumeration

CWE-306

CWE-863

Related Identifiers

BDU:2026-01008

CVE-2025-4960

Affected Products

Epson Printer Controller Installer

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-4960 · Security Note
• https://bdu.fstec.ru/vul/2026-01008 · Security Note
• https://jvn.jp/en/vu/JVNVU93543156 · Note
• https://twitter.com/CVEnew/status/2026265060532756658 · Twitter Post
• https://pentraze.com/vulnerability-reports/cve-2025-4960 · Note
• https://pentraze.com/vulnerability-reports · Note
• https://epson.jp/support/misc_t/250707_oshirase.htm · Note