CVE-2016-8769

Published: Apr 2, 2017Modified: May 13, 2026

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

Huawei UTPS earlier than UTPS-V200R003B015D16SPC00C983 has an unquoted service path vulnerability which can lead to the truncation of UTPS service query paths. An attacker may put an executable file in the search path of the affected service and obtain elevated privileges after the executable file is executed.

Affected (1)

Products: Huawei: Utps Firmware

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Utps Firmware	Up to v200r003b015d15sp00c983

Related CWEs

References (8)

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161116-01-utps-en

Source: psirt@huawei.com

Vendor Advisory

http://www.security-geek.in/2017/02/07/0day-discovery-system-level-access-by-privilege-escalation-of-huawei-manufactured-airtel-photon-dongles/

Source: psirt@huawei.com

Third Party AdvisoryURL Repurposed

http://www.securityfocus.com/bid/94403

Source: psirt@huawei.com

Third Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/40807/

Source: psirt@huawei.com

Third Party AdvisoryVDB Entry

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161116-01-utps-en

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.security-geek.in/2017/02/07/0day-discovery-system-level-access-by-privilege-escalation-of-huawei-manufactured-airtel-photon-dongles/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryURL Repurposed

http://www.securityfocus.com/bid/94403

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/40807/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.