Lucene search

[email protected]CVE-2017-9247

HistoryAug 02, 2017 - 7:29 p.m.

CVE-2017-9247

2017-08-0219:29:01

CWE-428

[email protected]

web.nvd.nist.gov

sierra wireless

mbdp

cve-2017-9247

windows mobile

broadband driver package

security vulnerability

unquoted service path

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Multiple unquoted service path vulnerabilities in Sierra Wireless Windows Mobile Broadband Driver Package (MBDP) with build ID < 4657 allows local users to launch processes with elevated privileges.

Affected configurations

NVD

Node

sierrawirelesssierra_wireless_em7345_softwareMatch-

sierrawirelesssierra_wireless_em7455_softwareMatch-

sierrawirelesssierra_wireless_location_sensor_driverMatch-

CPENameOperatorVersion
sierrawireless:sierra_wireless_em7345_softwaresierrawireless sierra wireless em7345 softwareeq-
sierrawireless:sierra_wireless_em7455_softwaresierrawireless sierra wireless em7455 softwareeq-
sierrawireless:sierra_wireless_location_sensor_driversierrawireless sierra wireless location sensor drivereq-

CPE	Name	Operator	Version
sierrawireless:sierra_wireless_em7345_software	sierrawireless sierra wireless em7345 software	eq	-
sierrawireless:sierra_wireless_em7455_software	sierrawireless sierra wireless em7455 software	eq	-
sierrawireless:sierra_wireless_location_sensor_driver	sierrawireless sierra wireless location sensor driver	eq	-

References

support.lenovo.com/us/en/product_security/LEN-12739

source.sierrawireless.com/resources/airprime/software/cve-2017-9247-unquoted-service-path-vulnerabilities/

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2017-9247

prion1 cvelist1 lenovo2 nvd1 openvas1