CVE-2016-8769 Huawei UTPS earlier than UTPS-V200R003B015D16SPC00C983 has an unquoted service path vulnerability which can lead to the truncation of UTPS service query paths. An attacker may put an executable file i...
MediumCVSS 6.7
EPSS 1.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Huawei UTPS earlier than UTPS-V200R003B015D16SPC00C983 has an unquoted service path vulnerability which can lead to the truncation of UTPS service query paths. An attacker may put an executable file in the search path of the affected service and obtain elevated privileges after the executable file is executed.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Huawei utps firmware | <= v200r003b015d15sp00c983 | No fix listed |
| Huawei Technologies Co., Ltd. Huawei UTPS | = earlier than UTPS-V200R003B015D16SPC00C983 | No fix listed |
References
- www.huawei.com vendor-advisory
- www.security-geek.in third-party-advisory url-repurposed
- 94403 third-party-advisory vdb-entry
- 40807 exploit third-party-advisory vdb-entry