PT-2017-18190 · Sierra Wireless · Me906S-158

Publicado 2017-11-22 · Atualizado 2019-10-03 · CVE-2017-8185

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ME906s-158 versions earlier than ME906S Installer 13.1805.10.3

Description The issue allows an attacker to elevate privileges, potentially modifying configuration information to include malicious files. This could trick users into executing these files, resulting in the execution of arbitrary code.

Recommendations For ME906s-158 versions earlier than ME906S Installer 13.1805.10.3, update to ME906S Installer 13.1805.10.3 or later to resolve the issue.

Correção

Exposure of Resource to Wrong Sphere

Enumeração de Fraquezas

CWE-668

Identificadores relacionados

CVE-2017-8185

Produtos afetados

Me906S-158

Referências · 3

• http://huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-me906s-en · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-8185 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-8185 · Nota de Segurança