PT-2016-5243

CVE-2016-2855

·

Published

2016-05-23

·

Updated

2016-05-25

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Huawei Mobile Broadband HL Service versions 22.001.25.00.03 and earlier
Description The issue allows local users to gain SYSTEM privileges by modifying the VERSION.dll. This is due to a weak Access Control List (ACL) used for the MobileBrServ program data directory.
Recommendations For versions 22.001.25.00.03 and earlier, consider restricting access to the MobileBrServ program data directory to prevent local users from modifying the VERSION.dll until a fix is available.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-264
Related identifiers
CVE-2016-2855
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com