PT-2017-18190 · Sierra Wireless · Me906S-158

Published 2017-11-22 · Updated 2019-10-03 · CVE-2017-8185

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ME906s-158 versions earlier than ME906S Installer 13.1805.10.3

Description The issue allows an attacker to elevate privileges, potentially modifying configuration information to include malicious files. This could trick users into executing these files, resulting in the execution of arbitrary code.

Recommendations For ME906s-158 versions earlier than ME906S Installer 13.1805.10.3, update to ME906S Installer 13.1805.10.3 or later to resolve the issue.

Fix

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

CVE-2017-8185

Affected Products

Me906S-158

References · 3

• http://huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-me906s-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-8185 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-8185 · Security Note