CVE-2014-8359 Untrusted search path vulnerability in Huawei Mobile Partner for Windows 23.009.05.03.1014 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dl...
HighCVSS 7.2
EPSS 1.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Untrusted search path vulnerability in Huawei Mobile Partner for Windows 23.009.05.03.1014 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll in the Mobile Partner directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Huawei mobile partner firmware | = 23.009.05.03.1014 | No fix listed |
| Huawei ec156 | All versions | No fix listed |
| Huawei ec176 | All versions | No fix listed |
| Huawei ec177 | All versions | No fix listed |
References
- osandamalith.wordpress.com exploit
- packetstormsecurity.com exploit
- www.huawei.com vendor-advisory
- 70671 exploit vdb-entry
- huawei-mobile-cve20148359-code-exec(97682) vdb-entry