CVE-2014-8358 Huawei EC156, EC176, and EC177 USB Modem products with software before UTPS-V200R003B015D02SP07C1014 (23.015.02.07.1014) and before V200R003B015D02SP08C1014 (23.015.02.08.1014) use a weak ACL for the....
HighCVSS 7.8
EPSS 5.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Huawei EC156, EC176, and EC177 USB Modem products with software before UTPS-V200R003B015D02SP07C1014 (23.015.02.07.1014) and before V200R003B015D02SP08C1014 (23.015.02.08.1014) use a weak ACL for the "Mobile Partner" directory, which allows remote attackers to gain SYSTEM privileges by compromising a low privilege account and modifying Mobile Partner.exe.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Huawei ec156 firmware | = v200r003b009d05sp03c1014 | No fix listed |
| Huawei ec176 firmware | = v200r003b009d05sp03c1014 | No fix listed |
| Huawei ec177 firmware | = v200r003b009d05sp03c1014 | No fix listed |
References
- www.huawei.com issue-tracking vendor-advisory
- 70672 third-party-advisory vdb-entry
- packetstormsecurity.com issue-tracking third-party-advisory vdb-entry