Huawei UTPS suspicious search path vulnerabilities (CVE-2016-2780)

Huawei UTPS suspicious search path vulnerabilities (CVE-2016-2780)
Huawei UTPS suspicious search path vulnerabilities (CVE-2016-2780)

Release date:
Updated on:

Affected Systems:

Huawei UTPS <UTPS-V200R003B015D15SP00C98

Description:

CVE (CAN) ID: CVE-2016-2780

Huawei UTPS runs on a USB modem to manage the data card.

A suspicious search path vulnerability exists in earlier versions of the Huawei UTPS UTPS-V200R003B015D15SP00C983. Local users can exploit this vulnerability to execute arbitrary code or DLL hijacking attacks.

<* Source: Memory in Wagh
*>

Suggestion:

Vendor patch:

Huawei
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160302-01-utps-en

This article permanently updates the link address: