PT-2026-3830 · Ebeam · Ebeam Education Suite

Luis Martinez · Published 2026-01-21 · Updated 2026-01-21 · CVE-2021-47878

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions eBeam Education Suite version 2.5.0.9

Description The eBeam Education Suite 2.5.0.9 contains an unquoted service path vulnerability within the 'eBeam Device Service'. This allows local users to potentially execute code with elevated privileges. An attacker can exploit the unquoted path in the service configuration to inject malicious code that would execute with LocalSystem privileges during service startup.

Recommendations Apply appropriate quoting to the service path configuration for the 'eBeam Device Service'.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2021-47878

Affected Products

Ebeam Education Suite

References · 5

• 🔥 https://exploit-db.com/exploits/49647 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47878 · Security Note
• https://vulncheck.com/advisories/ebeam-education-suite-ebeam-device-service-unquoted-service-path · Note
• https://t.me/CVEtracker/42669 · Telegram Post
• http://esvc000385.wic045u.server-web.com/Downloads/eBeam · Note