Exploitation Summary
EIP tracks 1 public exploit for CVE-2021-47879. PoCs published by Luis Martínez.
AI-analyzed exploit summary This is a writeup describing an unquoted service path vulnerability in Interactive Suite 3.6's eBeam Stylus Driver. The vulnerability allows local privilege escalation if an attacker can place an executable in a path that the service searches for during startup.
Description
eBeam Interactive Suite 3.6 contains an unquoted service path vulnerability in the eBeam Stylus Driver service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files (x86)\Luidia\eBeam Stylus Driver\ to inject malicious executables that would run with LocalSystem permissions.
Exploits (1)
This is a writeup describing an unquoted service path vulnerability in Interactive Suite 3.6's eBeam Stylus Driver. The vulnerability allows local privilege escalation if an attacker can place an executable in a path that the service searches for during startup.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H