CVE-2020-8948 - The Sierra Wireless Windows Mobile Broadband Driver Packages (MBDP) before build 5043 allows an unprivileged user to overwrite arbitrary files in arbitrary folders using hard links

Back Back to CVE browser

HIGH

The Sierra Wireless Windows Mobile Broadband Driver Packages (MBDP) before build 5043 allows an unprivileged user to overwrite arbitrary files in arbitrary folders using hard links

Published Apr 15, 2020

7.8

HIGH

CVSS 3.1

EPSS 0.47%

Description

The Sierra Wireless Windows Mobile Broadband Driver Packages (MBDP) before build 5043 allows an unprivileged user to overwrite arbitrary files in arbitrary folders using hard links. An unprivileged user could leverage this vulnerability to execute arbitrary code with system privileges.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-59

References (2)

https://danishcyberdefence.dk/blog/sierra_wireless
x_refsource_MISCThird Party Advisory
https://source.sierrawireless.com/resources/airlink/software_reference_docs/technical-bulletin/sierra-wireless-technical-bulletin---swi-psa-2020-002-cve-2020-8948/#sthash.ByZB8ifG.dpbs
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://danishcyberdefence.dk/blog/sierra_wireless		x_refsource_MISCThird Party Advisory
https://source.sierrawireless.com/resources/airlink/software_reference_docs/technical-bulletin/sierra-wireless-technical-bulletin---swi-psa-2020-002-cve-2020-8948/#sthash.ByZB8ifG.dpbs		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 15, 2020

Updated Aug 4, 2024

Reserved Feb 12, 2020

Link CVE-2020-8948

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-8948

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-8948