CVE-2016-5821

CVE-2016-5821 affects Huawei HiSuite for Windows. A local attacker can exploit insecure ACLs on the HiSuite service directory to perform DLL hijacking (via SspiCli.dll or USERENV.dll, among others) and escalate to SYSTEM. Affected versions include HiSuite up to 4.0.3.301 (and variants like 4.0.4....

Huawei HiSuite For Windows 4.0.3.301 Privilege Escalation

Vendor: Huawei, www.huawei.com Affected Product: HiSuite for Windows Affected Version: = 4.0.3.301 CVE ID: CVE-2016-5821 OVE ID: OVE-20160624-0001 Severity: High Author: Benjamin Gnahm @mitp0sh, Blue Frost Security GmbH Title: Huawei HiSuite Insecure Service Directory ACLs A privilege escalation...