CVE-2021-47879

HIGH

eBeam Interactive Suite 3.6 - Privilege Escalation

Title source: llm

Description

eBeam Interactive Suite 3.6 contains an unquoted service path vulnerability in the eBeam Stylus Driver service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files (x86)\Luidia\eBeam Stylus Driver\ to inject malicious executables that would run with LocalSystem permissions.

Exploits (1)

exploitdb WRITEUP

by Luis Martínez · textlocalwindows

https://www.exploit-db.com/exploits/49648

View Code ZIP pw:eip

References (3)

[Various Sources] http://esvc000385.wic045u.server-web.com/Downloads/eBeam/

[Third Party Advisory] https://www.vulncheck.com/advisories/ebeam-interactive-suite-ebeam-stylus-driver-unquoted-service-path

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/49648

Scores

CVSS v3 7.8

EPSS 0.0001

EPSS Percentile 2.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-428

Status draft

Timeline

Published Jan 21, 2026

Tracked Since Feb 18, 2026