VulnerabilityModified

CVE-2015-6034

EPSON Network Utility 4.10 uses weak permissions (Everyone: Full Control) for eEBSVC.exe, which allows local users to gain privileges via a Trojan horse file.

MEDIUM 6.9EPSS 0.32%

Does this matter?

Lower severity and a low EPSS score (0.32%). Track it; it rarely justifies an emergency change on its own.

Description

EPSON Network Utility 4.10 uses weak permissions (Everyone: Full Control) for eEBSVC.exe, which allows local users to gain privileges via a Trojan horse file.

CVSS 2.0: 6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
EPSS: 0.32% probability · 25th percentile
CISA KEV: Not listed
Weakness: CWE-264
Affected: epson/network utility
Source: cret@cert.org

References

http://www.kb.cert.org/vuls/id/672500Third Party Advisory, US Government Resource
https://www.epson.com/cgi-bin/Store/support/supAdvice.jsp?type=highlights&noteoid=288045Patch
http://www.kb.cert.org/vuls/id/672500Third Party Advisory, US Government Resource
https://www.epson.com/cgi-bin/Store/support/supAdvice.jsp?type=highlights&noteoid=288045Patch

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.