CVE-2016-8274
HighSummary
Huawei PC client software HiSuite 4.0.5.300_OVE has a DLL hijack vulnerability. An attacker can make the system load malicious DLL files to execute arbitrary code.
Risk Assessment
This vulnerability could lead to remote code execution, posing a serious threat to system and user data security.
Recommendation
It is recommended to update HiSuite software to the latest version to mitigate this vulnerability and to monitor the system for unauthorized changes.
Other vulnerabilities in Huawei HiSuite 4.0.5.300_OVE
See all- CVE-2016-8273High
Huawei PC client software HiSuite 4.0.5.300_OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing. This allows an attacker to launch a MITM attack, potentially compromising the PC.
- CVE-2016-5821High
Huawei HiSuite versions before 4.0.4.204_ove (Out of China) and before 4.0.4.301 (China) use a weak ACL (FILE_WRITE_DATA for BUILTIN\Users) for the HiSuite service directory. This allows local users to gain SYSTEM privileges via a Trojan horse, such as SspiCli.dll or USERENV.dll files.
Original NVD description (English source)
Huawei PC client software HiSuite 4.0.5.300_OVE has a dynamic link library (DLL) hijack vulnerability; an attacker can make the system load malicious DLL files to execute arbitrary code.