A local privilege escalation vulnerability in EPSON Printer Software 1.124 allows an attacker to execute malicious code with elevated system permissions.

The SENADB service utilizes an unquoted service path that lacks proper enclosure, which permits a local user to place a malicious executable in the directory structure. Because the service runs with LocalSystem privileges, the injected code will execute with full administrative rights upon service startup.

Successful exploitation allows a local user to gain complete control over the affected workstation. Given the CVSS score of 7.8, this vulnerability poses a significant risk as it facilitates full system compromise, potentially leading to data theft, installation of persistent backdoors, or lateral movement within the network.

Immediate Action: Update the EPSON printer software to the latest available version provided by the vendor, which addresses the unquoted service path configuration.

Proactive Monitoring: Monitor system event logs for unexpected service creation or modifications to files within the C:\Program Files (x86)\EPSON_P2B\ directory.

Compensating Controls: Implement strict file system permissions on the affected directory to prevent non-administrative users from writing or modifying files within the path used by the SENADB service.

Public Exploit Available: Yes, a public proof-of-concept exists as documented in the Exploit-DB entry 48965.

This vulnerability represents a high risk to endpoint security due to the potential for full system escalation. Administrators should prioritize patching the affected EPSON software immediately to eliminate the unquoted service path and prevent unauthorized code execution.