PT-2016-5243
CVE-2016-2855
·
Publicado
2016-05-23
·
Atualizado
2016-05-25
Descrição por
CVSS 3.1
7.8
AltaMétricasAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Huawei Mobile Broadband HL Service versions 22.001.25.00.03 and earlier
Description
The issue allows local users to gain SYSTEM privileges by modifying the VERSION.dll. This is due to a weak Access Control List (ACL) used for the MobileBrServ program data directory.
Recommendations
For versions 22.001.25.00.03 and earlier, consider restricting access to the MobileBrServ program data directory to prevent local users from modifying the VERSION.dll until a fix is available.
Explorabilidade
Correção
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾