The EPSON Status Monitor 3 service is vulnerable to arbitrary code execution via an unquoted service path, posing a significant risk of privilege escalation to local attackers.

This vulnerability arises from an unquoted service path in the EPSON_PM_RPCV4_06 service. A local attacker with low privileges can exploit this flaw by placing a malicious executable in the path, which the system will then execute with LocalSystem privileges.

Successful exploitation of this vulnerability allows a local attacker to gain full control over the affected system by escalating their privileges to LocalSystem. Given the CVSS score of 7.8, this represents a high-severity risk that could lead to complete system compromise, data theft, and the installation of persistent malicious software within the corporate environment.

Immediate Action: As no specific patch is currently available, administrators should manually modify the service path registry key to include quotes around the binary path (e.g., change the path to "C:\Program Files\Common Files\EPSON\EPW!3SSRP\E_S60RPB.EXE").

Proactive Monitoring: Review system logs for unauthorized service modifications or the creation of suspicious executable files within the Common Files directory structure.

Compensating Controls: Implement strict file system permissions on the affected directory to prevent non-privileged users from writing or modifying files within the EPSON installation path.

Public Exploit Available: Yes, an ExploitDB entry (EDB-ID 49141) exists.

Due to the high severity of potential privilege escalation and the availability of a documented exploit, immediate mitigation is required. Administrators should prioritize securing the service path configuration on all affected endpoints to prevent unauthorized local users from elevating their access to the system level.