PT-2020-20386

CVE-2020-8948

·

Published

2020-04-15

·

Updated

2021-07-21

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Sierra Wireless Windows Mobile Broadband Driver Packages (MBDP) versions prior to build 5043
Description The issue allows an unprivileged user to overwrite arbitrary files in arbitrary folders using hard links. This could be leveraged to execute arbitrary code with system privileges.
Recommendations For versions prior to build 5043, update to build 5043 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and folders to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾