PT-2016-5243
CVE-2016-2855
·
تاريخ النشر
2016-05-23
·
تاريخ التحديث
2016-05-25
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Huawei Mobile Broadband HL Service versions 22.001.25.00.03 and earlier
Description
The issue allows local users to gain SYSTEM privileges by modifying the VERSION.dll. This is due to a weak Access Control List (ACL) used for the MobileBrServ program data directory.
Recommendations
For versions 22.001.25.00.03 and earlier, consider restricting access to the MobileBrServ program data directory to prevent local users from modifying the VERSION.dll until a fix is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾