Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The installer for the Alcatel OSPREY3_MINI Modem component on EE EE40VB 4G mobile broadband modems with firmware before EE40_00_02.00_45 sets weak permissions (Everyone:Full Control) for the "Web Connecton\EE40" and "Web Connecton\EE40\BackgroundService" directories, which allows local users to gain privileges, as demonstrated by inserting a Trojan horse ServiceManager.exe file into the "Web Connecton\EE40\BackgroundService" directory.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
4GEE WiFi Mini 权限许可和访问控制问题漏洞
Vulnerability Description
4GEE WiFi Mini是一款便携式无线路由器。 使用EE40_00_02.00_45版本固件的4GEE WiFi Mini中存在本地提权漏洞，该漏洞源于安装程序（用于Alcatel OSPREY3_MINI Modem组件）为‘Web ConnectonEE40’和‘Web ConnectonEE40BackgroundService’目录设置了较弱的权限（Everyone:Full Control）。攻击者可利用该漏洞获取提升的系统权限。
CVSS Information
N/A
Vulnerability Type
N/A