Description
EPSON EasyMP Network Projection 2.81 contains an unquoted service path vulnerability in the EMP_NSWLSV service that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files (x86)\EPSON Projector\EasyMP Network Projection V2\ to inject malicious code that would execute with LocalSystem privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Epson | EPSON EasyMP Network Projection | 2.81 | — |
References
- ExploitDB-48069 exploit
- EPSON EasyMP Network Projection Support Page product
- VulnCheck Advisory: EPSON EasyMP Network Projection 2.81 - 'EMP_NSWLSV' Unquoted Service Path third-party-advisory