EUVD-2014-8196

Malware in sbrugna...

EUVD-2014-8195

Malware in sbrugna...

CVE-2014-8358

Huawei EC156, EC176, and EC177 USB Modem products with software before UTPS-V200R003B015D02SP07C1014 23.015.02.07.1014 and before V200R003B015D02SP08C1014 23.015.02.08.1014 use a weak ACL for the "Mobile Partner" directory, which allows remote attackers to gain SYSTEM privileges by compromising a...

Design/Logic Flaw

Huawei EC156, EC176, and EC177 USB Modem products with software before UTPS-V200R003B015D02SP07C1014 23.015.02.07.1014 and before V200R003B015D02SP08C1014 23.015.02.08.1014 use a weak ACL for the "Mobile Partner" directory, which allows remote attackers to gain SYSTEM privileges by compromising a...

Elevation of Privilege Vulnerability in Huawei UTPS

Huawei UTPS Unified Terminal PC suite, also known as Mobile Partner is an application software that runs on a PC to manage the data card, providing functions such as data card setup, dial-up connection, sending and receiving text messages, and managing the phonebook. Huawei UTPS suffers from an...

CVE-2014-8359

Untrusted search path vulnerability in Huawei Mobile Partner for Windows 23.009.05.03.1014 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll in the Mobile Partner directory...

CVE-2014-8359

CVE-2014-8359 corresponds to an untrusted search path vulnerability in Huawei Mobile Partner for Windows (version 23.009.05.03.1014) that enables local privilege escalation via DLL hijacking. An attacker could place a crafted wintab32.dll in the Mobile Partner directory to execute arbitrary code ...

Huawei Mobile Partner DLL Hijacking

Title: Huawei Mobile Partner Multiple Vulnerabilities Version: 23.009.05.03.1014 Tested on: Windows XP SP2 en Vendor: http://www.huawei.com/ Software-Link: http://download-c.huawei.com/download/downloadCenter?downloadId=18474&version=16815&siteCode=worldwide E-Mail: osandaatunseen.is Author: Osan...

Huawei Mobile Partner Poor Permissions

DESCRIPTION Huawei Mobile Partner application contains a flaw that may allow an attacker to gain access to unauthorized privileges. The issue is due to the application installing with insecure permissions. This allows a less privileged local attacker or compromised process to replace the...