CVE-2016-5821: High severity huawei hisuite vulnerability

Q: What is the severity of CVE-2016-5821?

CVE-2016-5821 has a high severity rating due to the potential for local users to escalate privileges to SYSTEM.

Q: How do I fix CVE-2016-5821?

To fix CVE-2016-5821, update Huawei HiSuite to version 4.0.4.204_ove or 4.0.4.301 or later.

Q: Who is affected by CVE-2016-5821?

Users of Huawei HiSuite versions prior to 4.0.4.204_ove and 4.0.4.301 are affected by CVE-2016-5821.

Q: What is the impact of CVE-2016-5821?

The impact of CVE-2016-5821 includes unauthorized local access to SYSTEM privileges, potentially allowing further exploitation.

Q: How can CVE-2016-5821 be exploited?

CVE-2016-5821 can be exploited by local users using specific trojan files like SspiCli.dll or USERENV.dll.

Published Jul 13, 2016

Updated

Huawei HiSuite before 4.0.4.204ove (Out of China) and before 4.0.4.301 (China) use a weak ACL (FILEWRITEDATA for BUILTIN\Users) for the HiSuite service directory, which allows local users to gain SYSTEM privileges via a Trojan horse (1) SspiCli.dll or (2) USERENV.dll file or possibly other unspecified DLL files.

Affected Software

1 affected component

Huawei HiSuite<=4.0.3.301

Event History

Jul 13, 2016

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-5821?

CVE-2016-5821 has a high severity rating due to the potential for local users to escalate privileges to SYSTEM.

How do I fix CVE-2016-5821?

To fix CVE-2016-5821, update Huawei HiSuite to version 4.0.4.204_ove or 4.0.4.301 or later.

Who is affected by CVE-2016-5821?

Users of Huawei HiSuite versions prior to 4.0.4.204_ove and 4.0.4.301 are affected by CVE-2016-5821.

What is the impact of CVE-2016-5821?

The impact of CVE-2016-5821 includes unauthorized local access to SYSTEM privileges, potentially allowing further exploitation.

How can CVE-2016-5821 be exploited?