CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Permissions Privileges and Access Controls
Summary: huawei hisuite before 4.0.4.204_ove (out of china) and before 4.0.4.301 (china) use a weak acl (file_write_data for builtin\users) for the hisuite service directory, which allows local users to gain system privileges via a trojan horse (1) sspicli.dll or (2) userenv.dll file or possibly other unspecified dll files.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2016-07-13
Last Modified Date: 2018-10-09