PT-2017-6468 · Zte · Zte Datacard Mf19

Publicado 2017-08-28 · Atualizado 2017-09-12 · CVE-2015-0974

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ZTE Datacard MF19 version 0V1.0.0B04

Description The issue allows local users to gain privileges by modifying the 'Ucell Internet' directory. This is done by referencing a malicious mms dll r.dll or mediaplayerdll.dll.

Recommendations For ZTE Datacard MF19 version 0V1.0.0B04, consider restricting access to the 'Ucell Internet' directory to prevent modification and referencing of malicious dll files such as mms dll r.dll or mediaplayerdll.dll until a patch is available.

Exploit

Correção

Untrusted Search Path

Enumeração de Fraquezas

CWE-426

Identificadores relacionados

CVE-2015-0974

Produtos afetados

Zte Datacard Mf19

Referências · 2

• 🔥 http://packetstormsecurity.com/files/129808/ZTE-Datacard-MF19-Privilege-Escalation-DLL-Hijacking.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-0974 · Nota de Segurança