PT-2016-6696
CVE-2016-5821
·
تاريخ النشر
2016-07-13
·
تاريخ التحديث
2018-10-09
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Huawei HiSuite versions prior to 4.0.4.204 ove (Out of China)
Huawei HiSuite versions prior to 4.0.4.301 (China)
Description
The issue allows local users to gain SYSTEM privileges via a Trojan horse
SspiCli.dll or USERENV.dll file or possibly other unspecified DLL files, due to a weak ACL for the HiSuite service directory.Recommendations
For versions prior to 4.0.4.204 ove (Out of China), update to version 4.0.4.204 ove or later.
For versions prior to 4.0.4.301 (China), update to version 4.0.4.301 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾