PT-2015-7122 · Epson · Epson Network Utility

Will Hunt · Published 2015-10-28 · Updated 2015-10-29 · CVE-2015-6034

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EPSON Network Utility version 4.10

Description The issue concerns weak permissions set for the eEBSVC.exe file, where everyone has full control. This weakness can be exploited by local users to gain privileges through the use of a Trojan horse file.

Recommendations For EPSON Network Utility version 4.10, consider restricting access to the eEBSVC.exe file to prevent unauthorized modifications and mitigate the risk of privilege escalation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-6034

Affected Products

Epson Network Utility

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-6034 · Security Note
• https://epson.com/cgi-bin/Store/support/supAdvice.jsp?type=highlights&noteoid=288045 · Patch
• http://kb.cert.org/vuls/id/672500 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6034 · Note