Vulnerability in Epson Network Utility

CVE-2015-6034

EPSON Network Utility 4.10 uses weak permissions (Everyone: Full Control) for eEBSVC.exe, which allows local users to gain privileges via a Trojan horse file.

EPSS: 0.003 (24.3th percentile) — read the EPSS interpretation.

Affected products

Epson Network_utility — versions 4.10
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cret@cert.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
cret@cert.org (x_refsource_CONFIRM, Patch)