Description
Epson USB Display 1.6.0.0 contains an unquoted service path vulnerability in the EMP_UDSA service running with LocalSystem privileges. Attackers can exploit the unquoted path by placing malicious executables in intermediate directories to gain elevated system access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Epson America | Epson USB Display | 1.6.0.0 | — |
References
- ExploitDB-49548 exploit
- Epson Official Homepage product
- VulnCheck Advisory: Epson USB Display 1.6.0.0 Unquoted Service Path Vulnerability third-party-advisory