EPSON Status Monitor 3 'EPSON_PM_RPCV4_06' - Unquoted Service Path | Advisories

Advisories

EPSON Status Monitor 3 'EPSON_PM_RPCV4_06' - Unquoted Service Path

severity: high
date: January 27, 2026
Affecting: Status Monitor 3 EPSON_PM_RPCV4_06 8.0
CVE: CVE-2020-36975
CWE: CWE-428 Unquoted Search Path or Element
CVSS: 8.5
CVSS V4 Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References: ExploitDB-49141
Official EPSON Corporate Homepage
Credit: SamAlucard
Description: EPSON Status Monitor 3 version 8.0 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code by exploiting the service binary path. Attackers can leverage the unquoted path in 'C:\Program Files\Common Files\EPSON\EPW!3SSRP\E_S60RPB.EXE' to inject malicious executables and escalate privileges.