CVE-2015-0974

Name of the Vulnerable Software and Affected Versions ZTE Datacard MF19 version 0V1.0.0B04

Description The issue allows local users to gain privileges by modifying the 'Ucell Internet' directory. This is done by referencing a malicious mms dll r.dll or mediaplayerdll.dll.

Recommendations For ZTE Datacard MF19 version 0V1.0.0B04, consider restricting access to the 'Ucell Internet' directory to prevent modification and referencing of malicious dll files such as mms dll r.dll or mediaplayerdll.dll until a patch is available.