The Epson USB Display software is vulnerable to a local privilege escalation flaw that could allow an attacker to execute malicious code with LocalSystem privileges.

This is an unquoted service path vulnerability (CWE-428) in the EMP_UDSA service. Because the service path is not enclosed in quotes, a local user with low privileges can place a malicious executable in an intermediate directory, which the service will then execute with elevated LocalSystem permissions.

Successful exploitation of this vulnerability allows a local, low-privileged user to achieve full control over the affected system. Given the CVSS score of 7.8, this represents a high-severity risk to confidentiality, integrity, and availability. Compromise of the LocalSystem account typically results in total system takeover, potentially leading to unauthorized data access and the deployment of persistent malware.

Immediate Action: Since no patch is explicitly available, administrators should manually remediate the service path by adding quotes to the binary path in the Windows Registry (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EMP_UDSA) or uninstall the software if it is not business-critical.

Proactive Monitoring: Monitor system logs for unauthorized service modifications or the creation of unexpected executable files within the Epson installation directory structure.

Compensating Controls: Implement strict file system permissions on the installation directories to prevent low-privileged users from writing or modifying files within the path used by the EMP_UDSA service.

Public Exploit Available: Yes, a proof-of-concept exists as documented in the Exploit Database (EDB-ID: 49548).

Due to the high severity of potential privilege escalation, organizations using Epson USB Display version 1.6.0.0 must prioritize manual remediation of the service configuration. If the software is not required for daily operations, removal is the most effective way to eliminate this risk. Ensure that all systems are audited for similar unquoted service paths to prevent lateral movement and privilege escalation attacks.