Huawei HiSuite For Windows 4.0.3.301 Privilege Escalation
Posted by deepcore on July 2, 2016 – 1:16 am
A privilege escalation vulnerability was identified in the Huawei HiSuite software which can be used by a local user to elevate privileges to become the SYSTEM user. The root cause of the problem are insecure ACLs on the HandSet service directory which allows any authenticated user to place a crafted DLL file in that directory to perform a DLL hijacking attack. Versions 4.0.3.301 and below are affected.
Post a reply
You must be logged in to post a comment.