CVE-2020-8948: High severity sierra wireless mobile broadband inf package vulnerability
The Sierra Wireless Windows Mobile Broadband Driver Packages (MBDP) before build 5043 allows an unprivileged user to overwrite arbitrary files in arbitrary folders using hard links. An unprivileged user could leverage this vulnerability to execute arbitrary code with system privileges.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-8948?
CVE-2020-8948 is a vulnerability in the Sierra Wireless Windows Mobile Broadband Driver Packages (MBDP) before build 5043 that allows an unprivileged user to overwrite arbitrary files in arbitrary folders using hard links, potentially leading to arbitrary code execution with system privileges.
What is the severity of CVE-2020-8948?
The severity of CVE-2020-8948 is high, with a CVSS score of 7.8.
How does CVE-2020-8948 affect Sierra Wireless Mobile Broadband Driver Package?
CVE-2020-8948 affects Sierra Wireless Mobile Broadband Driver Package versions prior to build 5043.
How can an attacker exploit CVE-2020-8948?
An attacker can exploit CVE-2020-8948 by leveraging the vulnerability to overwrite arbitrary files in arbitrary folders using hard links, potentially executing arbitrary code with system privileges.
Is there a fix for CVE-2020-8948?
Yes, updating Sierra Wireless Mobile Broadband Driver Package to build 5043 or later resolves CVE-2020-8948.