What is CVE-2020-36975?

CVE-2020-36975 is a high-severity vulnerability in Seiko Epson Corp Status Monitor 3, classified under Unquoted Search Path or Element. CVSS score: 7.8/10. Published 2026-01-27.

How severe is CVE-2020-36975?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Seiko Epson Corp Status Monitor 3

CVE-2020-36975

EPSON Status Monitor 3 version 8.0 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code by exploiting the service binary path. Attackers can leverage the unquoted path in 'C:\Program Files\Common Files\EPSON\EPW!3SSRP\E_S60RPB.EXE' to inject malicious executables and escalate privileges.

EPSS: 0.002 (6.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Seiko Epson Corp Status Monitor 3 — versions EPSON_PM_RPCV4_06 8.0

Weakness classification (CWE)

CWE-428 — Unquoted Search Path or Element

References

ExploitDB-49141 (exploit)
Official EPSON Corporate Homepage (product)
VulnCheck Advisory: EPSON Status Monitor 3 'EPSON_PM_RPCV4_06' - Unquoted Service Path (third-party-advisory)

Frequently asked questions

What is CVE-2020-36975?: CVE-2020-36975 is a high-severity vulnerability in Seiko Epson Corp Status Monitor 3, classified under Unquoted Search Path or Element. CVSS score: 7.8/10. Published 2026-01-27.
How severe is CVE-2020-36975?: High severity. CVSS v3 base score is 7.8 out of 10.