Epson Status Monitor 3 Unquoted Service Path Vulnerability Allowing Arbitrary Code Execution

A vulnerability exists in Epson Status Monitor 3, specifically in version 8.0, due to an unquoted service path. This flaw allows local attackers to execute arbitrary code by exploiting the service binary path. The unquoted path can be found in 'C:\Program Files\Common Files\EPSON\EPW!3SSRP\E_S60RPB.EXE', where malicious executables can be injected to escalate privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation and execution of arbitrary code with elevated rights.

Reproduction

The vulnerability can be reproduced by injecting a malicious executable into the unquoted service path of the Epson Status Monitor 3 service. Once the executable is injected, it can be executed to gain elevated privileges.