PT-2026-5110 · Epson · Epson

Published 2026-01-28 · Updated 2026-01-28 · CVE-2020-36984

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions EPSON version 1.124

Description EPSON 1.124 contains an unquoted service path vulnerability in the SENADB service. This allows local attackers to execute code with elevated system privileges. The vulnerability exists due to an unquoted path in C:Program Files (x86)EPSON P2BPrinter SoftwareStatus Monitor. Attackers can inject malicious executables into this directory, which will then run with LocalSystem permissions.

Recommendations Ensure the service path for SENADB is enclosed in quotes.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2020-36984

Affected Products

Epson

References · 6

• 🔥 https://exploit-db.com/exploits/48965 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-36984 · Security Note
• https://vulncheck.com/advisories/epson-seksmdbexe-unquoted-service-path · Note
• https://t.me/CVEtracker/43141 · Telegram Post
• https://t.me/cveNotify/150127 · Telegram Post
• https://epson.co.uk/support?productID=10820&os=22#drivers_and_manuals · Note