CVE-2020-36984: EPSON 1.124 - 'seksmdb.exe' Unquoted Service Path
EPSON 1.124 contains an unquoted service path vulnerability in the SENADB service that allows local attackers to execute code with elevated system privileges. Attackers can exploit the unquoted path in C:\Program Files (x86)\EPSONP2B\Printer Software\Status Monitor\ to inject malicious executables that will run with LocalSystem permissions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-36984?
CVE-2020-36984 is classified as a high-severity vulnerability due to the potential for local code execution with elevated system privileges.
How do I fix CVE-2020-36984?
To resolve CVE-2020-36984, ensure the service path is correctly quoted in the service configuration to prevent exploitation.
Which versions of EPSON software are affected by CVE-2020-36984?
CVE-2020-36984 affects EPSON software version 1.124 that includes the SENADB service.
What kind of attack can be executed using CVE-2020-36984?
CVE-2020-36984 allows local attackers to execute arbitrary code with elevated privileges through the unquoted service path.
How can I determine if my system is vulnerable to CVE-2020-36984?
You can check if your system uses the SENADB service from EPSON version 1.124 with an unquoted service path to assess vulnerability.