CVE-2016-8769

State: Published
Severity: Not scored
Published: Apr 2, 2017
Updated: Sep 16, 2024
Reserved: Oct 18, 2016

Description

Huawei UTPS earlier than UTPS-V200R003B015D16SPC00C983 has an unquoted service path vulnerability which can lead to the truncation of UTPS service query paths. An attacker may put an executable file in the search path of the affected service and obtain elevated privileges after the executable file is executed.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Huawei UTPSHuawei Technologies Co., Ltd.	earlier than UTPS-V200R003B015D16SPC00C983Affected

References

http://www.security-geek.in/2017/02/07/0day-discovery-system-level-access-by-privilege-escalation-of-huawei-manufactured-airtel-photon-dongles/
94403vdb-entry
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161116-01-utps-en
40807exploit

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.