CVE-2021-47879

HIGH

eBeam Interactive Suite 3.6 - Privilege Escalation

Title source: llm

Description

eBeam Interactive Suite 3.6 contains an unquoted service path vulnerability in the eBeam Stylus Driver service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files (x86)\Luidia\eBeam Stylus Driver\ to inject malicious executables that would run with LocalSystem permissions.

Exploits (1)

exploitdb WRITEUP

by Luis Martínez · textlocalwindows

https://www.exploit-db.com/exploits/49648

View Code ZIP pw:eip

References (3)

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/49648

[Various Sources] http://esvc000385.wic045u.server-web.com/Downloads/eBeam/

[Third Party Advisory] https://www.vulncheck.com/advisories/ebeam-interactive-suite-ebeam-stylus-driver-unquoted-service-path

Scores

CVSS v3 7.8

EPSS 0.0002

EPSS Percentile 3.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

Details

CWE

CWE-428

Status published

Products (1)

Luidia/eBeam Interactive Suite 3.6

Published Jan 21, 2026

Tracked Since Feb 18, 2026