NVD

Id
18838  
Name
CVE-2016-2855  
Description
The Huawei Mobile Broadband HL Service 22.001.25.00.03 and earlier uses a weak ACL for the MobileBrServ program data directory, which allows local users to gain SYSTEM privileges by modifying VERSION.dll.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-05-23  
Modified Date
2016-05-25  
Seq
2016-2855  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
104651 18838 CVE-2016-2855 http://packetstormsecurity.com/files/137025/Huawei-Mobile-Broadband-HL-Service-22.001.25.00.03-Local-Privilege-Escalation.html  View
104652 18838 CVE-2016-2855 20160512 Huawei Mobile Broadband HL Service Local Privilege Escalation  View
104653 18838 CVE-2016-2855 https://bogner.sh/2016/05/cve-2016-2855-huawei-mobile-broadband-hl-service-local-privilege-escalation/  View
104654 18838 CVE-2016-2855 https://www.youtube.com/watch?v=MwtjE2PmEJU  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2133 JVNDB-2016-002906 Huawei Mobile Broadband HL Service における SYSTEM 権限を取得される脆弱性 Huawei Mobile Broadband HL Service は、MobileBrServ プログラムのデータディレクトリの脆弱な ACL を使用するため、SYSTEM 権限を取得される脆弱性が存在します。 CVE-2016-2855 89361 CVE-2016-2855 18838 7.2 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002906.html 2016-05-12 2016-05-27 View