CVE-2014-8359

2014-11-1321:32:05

CWE-264

[email protected]

web.nvd.nist.gov

cve-2014-8359

huawei

mobile partner

windows

vulnerability

dll hijacking

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.9%

JSON

Untrusted search path vulnerability in Huawei Mobile Partner for Windows 23.009.05.03.1014 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll in the Mobile Partner directory.

Affected configurations

NVD

Node

huaweimobile_partner_firmwareMatch23.009.05.03.1014

AND

huaweiec156Match-

huaweiec176Match-

huaweiec177Match-

CPENameOperatorVersion
huawei:mobile_partner_firmwarehuawei mobile partner firmwareeq23.009.05.03.1014
huawei:ec156huawei ec156eq-
huawei:ec176huawei ec176eq-
huawei:ec177huawei ec177eq-

CPE	Name	Operator	Version
huawei:mobile_partner_firmware	huawei mobile partner firmware	eq	23.009.05.03.1014
huawei:ec156	huawei ec156	eq	-
huawei:ec176	huawei ec176	eq	-
huawei:ec177	huawei ec177	eq	-