EPSON Status Monitor 3 ‘EPSON_PM_RPCV4_06’ – Unquoted Service Path

Exploit Database
16 阅读

作者： SamAlucard

日期： 2020-12-01
类别：
- local
平台：
- windows
来源：https://www.exploit-db.com/exploits/49141/

#Exploit Title: EPSON Status Monitor 3 'EPSON_PM_RPCV4_06' - Unquoted Service Path
#Exploit Author : SamAlucard
#Exploit Date: 2020-27-11
#Vendor :SEIKO EPSON Corp
#Version : EPSON_PM_RPCV4_06 8.0
#Vendor Homepage : https://epson.com
#Tested on OS: Windows 7 Pro

#Analyze PoC :
==============
C:\>sc qc EPSON_PM_RPCV4_06
[SC] QueryServiceConfig CORRECTO

NOMBRE_SERVICIO: EPSON_PM_RPCV4_06
TIPO : 10WIN32_OWN_PROCESS
TIPO_INICIO: 2 AUTO_START
CONTROL_ERROR: 1 NORMAL
NOMBRE_RUTA_BINARIO: C:\Program Files\Common Files\EPSON\EPW!3
SSRP\E_S60RPB.EXE
GRUPO_ORDEN_CARGA:
ETIQUETA : 0
NOMBRE_MOSTRAR : EPSON V3 Service4(06)
DEPENDENCIAS :
NOMBRE_INICIO_SERVICIO: LocalSystem

last Exploits
EPSON Status Monitor 3 ‘EPSON_PM_RPCV4_06’ – Unquoted Service Path的更多信息

A-PDF All to MP3 Converter 2.0.0 – DEP Bypass via HeapCreate + HeapAlloc：
Easy LAN Folder Share 3.2.0.100 – Local Buffer Overflow (SEH)：
10-Strike Network Scanner 3.0 – Local Buffer Overflow (SEH)：
Marked2 – Local File Disclosure：
Linux Kernel 4.4.0-21 (Ubuntu 16.04 x64) – Netfilter ‘target_offset’ Out-of-Bounds Privilege Escalation：
HCL Lotus Notes V12 – Unquoted Service Path：
MaxxAudio Drivers WavesSysSvc64.exe 1.6.2.0 – Local Privilege Escalation：
Base64 Decoder 1.1.2 – Local Buffer Overflow (SEH)：