CVE-2016-5821
HighSummary
Huawei HiSuite versions before 4.0.4.204_ove (Out of China) and before 4.0.4.301 (China) use a weak ACL (FILE_WRITE_DATA for BUILTIN\Users) for the HiSuite service directory. This allows local users to gain SYSTEM privileges via a Trojan horse, such as SspiCli.dll or USERENV.dll files.
Risk Assessment
Organizations may be exposed to unauthorized access to the system, potentially leading to serious security breaches and data loss.
Recommendation
It is recommended to update HiSuite to the latest version to eliminate the weak access control and to monitor systems for potential malicious activities.
Other vulnerabilities in Huawei HiSuite
See all- CVE-2016-8274High
Huawei PC client software HiSuite 4.0.5.300_OVE has a DLL hijack vulnerability. An attacker can make the system load malicious DLL files to execute arbitrary code.
- CVE-2016-8273High
Huawei PC client software HiSuite 4.0.5.300_OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing. This allows an attacker to launch a MITM attack, potentially compromising the PC.
Original NVD description (English source)
Huawei HiSuite before 4.0.4.204_ove (Out of China) and before 4.0.4.301 (China) use a weak ACL (FILE_WRITE_DATA for BUILTIN\Users) for the HiSuite service directory, which allows local users to gain SYSTEM privileges via a Trojan horse (1) SspiCli.dll or (2) USERENV.dll file or possibly other unspecified DLL files.