Advertisement






Epson USB Display 1.6.0.0 EMP_UDSA Unquote Service Path

CVE Category Price Severity
N/A CWE-71 Not specified Critical
Author Risk Exploitation Type Date
Unknown High Local 2021-02-15
CPE
cpe:cpe:/a:epson:usb_display:1.6.0.0
CVSS EPSS EPSSP
CVSS:9.8/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 0.02192 0.50148

CVSS vector description

Our sensors found this exploit at: https://cxsecurity.com/ascii/WLB-2021020088

Below is a copy:

Epson USB Display 1.6.0.0 EMP_UDSA Unquote Service Path
# Exploit Title: Epson USB Display 1.6.0.0 - 'EMP_UDSA' Unquote Service Path
# Discovery by: Hector Gerbacio
# Discovery Date: 2021-02-05
# Vendor Homepage: https://epson.com.mx/
# Tested Version: 1.6.0.0
# Vulnerability Type: Unquoted Service Path
# Tested on OS: Windows 8.1 con Bing

# Step to discover Unquoted Service Path:

C:\>wmic service get name, displayname, pathname, startmode | findstr /i "auto" | findstr /i /v "C:\WINDOWS\\" | findstr /i "EMP_UDSA" | findstr /i /v """
EMP_UDSAEMP_UDSAC:\Program Files (x86)\EPSON Projector\Epson USB Display V1.6\EMP_UDSA.exeAuto

# Service info:

C:\>sc qc EMP_UDSA
[SC] QueryServiceConfig CORRECTO

NOMBRE_SERVICIO: EMP_UDSA
        TIPO               : 110  WIN32_OWN_PROCESS (interactive)
        TIPO_INICIO        : 2   AUTO_START
        CONTROL_ERROR      : 1   NORMAL
        NOMBRE_RUTA_BINARIO: C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.6\EMP_UDSA.exe
        GRUPO_ORDEN_CARGA  :
        ETIQUETA           : 0
        NOMBRE_MOSTRAR     : EMP_UDSA
        DEPENDENCIAS       : RPCSS
        NOMBRE_INICIO_SERVICIO: LocalSystem

Copyright ©2024 Exploitalert.

This information is provided for TESTING and LEGAL RESEARCH purposes only.
All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use and Privacy Policy and Impressum