PT-2017-18804 · Sierra Wireless · Sierra Wireless Windows Mobile Broadband Driver Package

Published 2017-08-02 · Updated 2017-08-25 · CVE-2017-9247

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sierra Wireless Windows Mobile Broadband Driver Package (MBDP) versions with build ID less than 4657

Description The issue concerns multiple unquoted service path vulnerabilities. This allows local users to launch processes with elevated privileges.

Recommendations For versions with build ID less than 4657, update to a version with build ID 4657 or higher to resolve the issue.

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2017-9247

Affected Products

Sierra Wireless Windows Mobile Broadband Driver Package

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-9247 · Security Note
• https://source.sierrawireless.com/resources/airprime/software/cve-2017-9247-unquoted-service-path-vulnerabilities · Vendor Advisory
• http://support.lenovo.com/us/en/product_security/LEN-12739 · Note