What is the CVSS score of CVE-2015-6034?

CVE-2015-6034 has a CVSS 2.0 base score of 6.9 (Medium). CVSS vector: AV:L/AC:M/Au:N/C:C/I:C/A:C. EPSS exploitation probability: 0.1%.

Is there a patch available for CVE-2015-6034?

Yes, a patch is available for CVE-2015-6034. Update the affected software to the latest version immediately.

Network Utility CVE-2015-6034

MEDIUM

Permissions, Privileges, and Access Controls (CWE-264)

2015-10-28 cret@cert.org

Privilege Escalation Network Utility

6.9

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

6.9 MEDIUM

AV:L/AC:M/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:M/Au:N/C:C/I:C/A:C

Attack Vector

Local

Attack Complexity

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Oct 28, 2015 - 18:59 cve.org

MEDIUM 6.9

DescriptionCVE.org

EPSON Network Utility 4.10 uses weak permissions (Everyone: Full Control) for eEBSVC.exe, which allows local users to gain privileges via a Trojan horse file.

AnalysisAI

EPSON Network Utility 4.10 uses weak permissions (Everyone: Full Control) for eEBSVC.exe, which allows local users to gain privileges via a Trojan horse file. Rated medium severity (CVSS 6.9).

Technical ContextAI

This vulnerability is classified under CWE-264. EPSON Network Utility 4.10 uses weak permissions (Everyone: Full Control) for eEBSVC.exe, which allows local users to gain privileges via a Trojan horse file. Affected products include: Epson Network Utility.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.