PT-2015-7122 · Epson · Epson Network Utility

Will Hunt · Publicado 2015-10-28 · Atualizado 2015-10-29 · CVE-2015-6034

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EPSON Network Utility version 4.10

Description The issue concerns weak permissions set for the eEBSVC.exe file, where everyone has full control. This weakness can be exploited by local users to gain privileges through the use of a Trojan horse file.

Recommendations For EPSON Network Utility version 4.10, consider restricting access to the eEBSVC.exe file to prevent unauthorized modifications and mitigate the risk of privilege escalation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-6034

Produtos afetados

Epson Network Utility

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-6034 · Nota de Segurança
• http://kb.cert.org/vuls/id/672500 · Nota
• https://epson.com/cgi-bin/Store/support/supAdvice.jsp?type=highlights&noteoid=288045 · Correção
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6034 · Nota