Approved changes feed: RSS · Atom

cpe:2.3:o:ee:ee40vb_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorEe (c98adb07-e078-5543-bb50-f31a80ea8219)
ProductEe40Vb Firmware (e728f1fe-746c-5711-9c00-963a8b32b15d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-14327 vulnerable 2026-06-08 05:10:52.769814 Details available
The installer for the Alcatel OSPREY3_MINI Modem component on EE EE40VB 4G mobile broadband modems with firmware before EE40_00_02.00_45 sets weak permissions (Everyone:Full Control) for the "Web Connecton\EE40" and "Web Connecton\EE40\BackgroundService" directories, which allows local users to gain privileges, as demonstrated by inserting a Trojan horse ServiceManager.exe file into the "Web Connecton\EE40\BackgroundService" directory.
Published: 2018-09-26T22:00:00.000Z
Updated: 2024-08-05T09:21:41.685Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.