Epson vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2025-4960 The com.epson.InstallNavi.helper tool, deployed with the EPSON printer driver installer, contains a local privilege escalation vulnerability due to multiple flaHigh 7.8 · Feb 19, 2026
• CVE-2020-37064 EPSON EasyMP Network Projection 2.81 contains an unquoted service path vulnerability in the EMP_NSWLSV service that allows local users to potentially execute arHigh 8.5 · Feb 1, 2026
• CVE-2020-36984 EPSON 1.124 contains an unquoted service path vulnerability in the SENADB service that allows local attackers to execute code with elevated system privileges.High 8.5 · Jan 28, 2026
• CVE-2019-20460 An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices.High 8.8 · Nov 7, 2024
• CVE-2019-20459 An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices.High 8.4 · Nov 7, 2024
• CVE-2019-20458 An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices.High 8.8 · Nov 7, 2024
• CVE-2022-36133 The WebConfig functionality of Epson TM-C3500 and TM-C7500 devices with firmware version WAM31500 allows authentication bypass.Critical 9.1 · Nov 25, 2022
• CVE-2020-28931 Lack of an anti-CSRF token in the entire administrative interface in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to force an administratHigh 8.8 · Dec 16, 2020
• CVE-2020-28929 Unrestricted access to the log downloader functionality in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to remotely retrieve administratiCritical 9.8 · Dec 16, 2020
• CVE-2020-6091 An exploitable authentication bypass vulnerability exists in the ESPON Web Control functionality of Epson EB-1470Ui MAIN: 98009273ESWWV107 MAIN2: 8X7325WWV303.Critical 9.1 · May 22, 2020
• CVE-2018-19248 The web service on Epson WorkForce WF-2861 10.48 LQ22I3(Recovery-mode), WF-2861 10.51.LQ20I6, and WF-2861 10.52.LQ17IA devices allows remote attackers to uploadCritical 9.1 · Dec 24, 2018
• CVE-2018-19232 The web service on Epson WorkForce WF-2861 10.48 LQ22I3(Recovery-mode), WF-2861 10.51.LQ20I6, and WF-2861 10.52.LQ17IA devices allows remote attackers to cause High 7.5 · Dec 24, 2018
• CVE-2018-18959 An issue was discovered on Epson WorkForce WF-2861 10.48 LQ22I3, 10.51.LQ20I6 and 10.52.LQ17IA devices.High 7.5 · Dec 24, 2018
• CVE-2018-14903 EPSON WF-2750 printers with firmware JP02I2 do not properly validate files before running updates, which allows remote attackers to cause a printer malfunction High 7.5 · Aug 30, 2018
• CVE-2018-14902 The ContentProvider in the EPSON iPrint application 6.6.3 for Android does not properly restrict data access.High 7.5 · Aug 30, 2018
• CVE-2018-14901 The EPSON iPrint application 6.6.3 for Android contains hard-coded API and Secret keys for the Dropbox, Box, Evernote and OneDrive services.High 7.5 · Aug 30, 2018
• CVE-2018-14900 On EPSON WF-2750 printers with firmware JP02I2, there is no filtering of print jobs.High 7.5 · Aug 30, 2018
• CVE-2017-12861 The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using a unique 4-digit codeCritical 9.8 · Oct 10, 2017
• CVE-2017-12860 The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using a unique 4-digit codeCritical 9.8 · Oct 10, 2017