CVE-2018-14327 - The installer for the Alcatel OSPREY3_MINI Modem component on EE EE40VB 4G mobile broadband modems with firmware before EE40_00_02.00_45 sets weak permissions (Everyone:Full Control) for the "Web Connecton\EE40" and "Web Connecton\EE40\BackgroundService" directories, which allows local users to gain privileges, as demonstrated by inserting a Trojan horse ServiceManager.exe file into the "Web Connecton\EE40\BackgroundService" directory

Back Back to CVE browser

HIGH

The installer for the Alcatel OSPREY3_MINI Modem component on EE EE40VB 4G mobile broadband modems with firmware before EE40_00_02.00_45 sets weak permissions (Everyone:Full Control) for the "Web Connecton\EE40" and "Web Connecton\EE40\BackgroundService" directories, which allows local users to gain privileges, as demonstrated by inserting a Trojan horse ServiceManager.exe file into the "Web Connecton\EE40\BackgroundService" directory

Published Sep 26, 2018

7.8

HIGH

CVSS 3.0

EPSS 4.39%

Description

The installer for the Alcatel OSPREY3_MINI Modem component on EE EE40VB 4G mobile broadband modems with firmware before EE40_00_02.00_45 sets weak permissions (Everyone:Full Control) for the "Web Connecton\EE40" and "Web Connecton\EE40\BackgroundService" directories, which allows local users to gain privileges, as demonstrated by inserting a Trojan horse ServiceManager.exe file into the "Web Connecton\EE40\BackgroundService" directory.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-732

Incorrect Permission Assignment

References (5)

http://blog.zerodaylab.com/2018/09/zerodaylab-discovers-ee-unquoted.html
x_refsource_MISCExploitPatch
http://packetstormsecurity.com/files/149492/EE-4GEE-Mini-Local-Privilege-Escalation.html
x_refsource_MISCExploitThird Party AdvisoryVDB Entry
http://www.securityfocus.com/bid/105385
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://osandamalith.com/2018/09/17/ee-4gee-mini-local-privilege-escalation-vulnerability-cve-2018-14327/
x_refsource_MISCExploitPatchTechnical DescriptionThird Party Advisory
https://www.exploit-db.com/exploits/45501/
exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry

Link	Providers	Tags
http://blog.zerodaylab.com/2018/09/zerodaylab-discovers-ee-unquoted.html		x_refsource_MISCExploitPatch
http://packetstormsecurity.com/files/149492/EE-4GEE-Mini-Local-Privilege-Escalation.html		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
http://www.securityfocus.com/bid/105385		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://osandamalith.com/2018/09/17/ee-4gee-mini-local-privilege-escalation-vulnerability-cve-2018-14327/		x_refsource_MISCExploitPatchTechnical DescriptionThird Party Advisory
https://www.exploit-db.com/exploits/45501/		exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry