PT-2017-18804 · Sierra Wireless · Sierra Wireless Windows Mobile Broadband Driver Package

Publicado 2017-08-02 · Atualizado 2017-08-25 · CVE-2017-9247

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sierra Wireless Windows Mobile Broadband Driver Package (MBDP) versions with build ID less than 4657

Description The issue concerns multiple unquoted service path vulnerabilities. This allows local users to launch processes with elevated privileges.

Recommendations For versions with build ID less than 4657, update to a version with build ID 4657 or higher to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2017-9247

Produtos afetados

Sierra Wireless Windows Mobile Broadband Driver Package

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-9247 · Nota de Segurança
• http://support.lenovo.com/us/en/product_security/LEN-12739 · Nota
• https://source.sierrawireless.com/resources/airprime/software/cve-2017-9247-unquoted-service-path-vulnerabilities · Aviso do Fabricante