{"id":"CVE-2018-14327","published":"2018-09-26T22:00:00Z","modified":"2024-08-05T09:21:41Z","title":"The installer for the Alcatel OSPREY3_MINI Modem component on EE EE40VB 4G mobile broadband modems with firmware…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"The installer for the Alcatel OSPREY3_MINI Modem component on EE EE40VB 4G mobile broadband modems with firmware before EE40_00_02.00_45 sets weak permissions (Everyone:Full Control) for the \"Web Connecton\\EE40\" and \"Web Connecton\\EE40\\BackgroundService\" directories, which allows local users to gain privileges, as demonstrated by inserting a Trojan horse ServiceManager.exe file into the \"Web Connecton\\EE40\\BackgroundService\" directory.","provenance":"source","from":"CVE.org"},"summary":null,"cvss":null,"epss":{"score":0.04387,"percentile":0.91271,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"http://blog.zerodaylab.com/2018/09/zerodaylab-discovers-ee-unquoted.html","tags":["x_refsource_MISC"]},{"url":"https://osandamalith.com/2018/09/17/ee-4gee-mini-local-privilege-escalation-vulnerability-cve-2018-14327/","tags":["x_refsource_MISC"]},{"url":"https://www.exploit-db.com/exploits/45501/","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"http://www.securityfocus.com/bid/105385","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://packetstormsecurity.com/files/149492/EE-4GEE-Mini-Local-Privilege-Escalation.html","tags":["x_refsource_MISC"]}],"techniques":[{"id":"T1068","name":"Exploitation for Privilege Escalation","tactics":["privilege-escalation"],"provenance":"machine","basis":"dataset-annotation","bases":["dataset-annotation"],"basisDetail":"TRAM2 annotated sentence label","mappingType":null,"evidence":[{"reportId":"SRC-f4c98cea9a56376facbe","quote":"This vulnerability, registered as “CVE-2018-14327,” allows a low-privileged user account to escalate privileges on any Windows machine that had connected to the EE Mini modem via USB. The vulnerability is located in the driver files installed by the modem onto Windows machines, where the folder permissions allow anyone","start":5644,"end":5964}],"confidence":"low","confidenceNote":"machine-matched from report text"}],"reports":[{"id":"SRC-f4c98cea9a56376facbe","title":"WTB: Adwind Trojan Circumvents Antivirus Software To Infect Your PC","publisher":"anomali.com","url":"https://www.anomali.com/blog/wtb-adwind-trojan-circumvents-antivirus-software-to-infect-your-pc","date":null,"mentions":[{"quote":"This vulnerability, registered as “CVE-2018-14327,” allows a low-privileged user account to escalate privileges on any Windows machine that had connected to the EE Mini modem via USB.","start":5644,"end":5827}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2018-6249","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-6249","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":45501,"url":"https://www.exploit-db.com/exploits/45501","title":"EE 4GEE Mini EE40_00_02.00_44 - Privilege Escalation","type":"local","platform":"windows","date":"2018-09-27","verified":false,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2018-09-27"},"first":{"date":"2018-09-27","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/45501"},"provenance":"source"},"exploitRefs":["https://www.exploit-db.com/exploits/45501/","http://packetstormsecurity.com/files/149492/EE-4GEE-Mini-Local-Privilege-Escalation.html"],"flow":[{"stage":"observed","techniques":["T1068"],"provenance":"machine","lowConfidence":true}],"timeline":[{"date":"2018-09-26","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2018-14327","provenance":"source"},{"date":"2018-09-27","kind":"exploit-public","label":"First public exploit: Exploit-DB (EDB-45501)","url":"https://www.exploit-db.com/exploits/45501","provenance":"source"}],"speed":{"daysToPublicExploit":1,"firstExploitFrom":"Exploit-DB","daysToKev":null},"priority":{"score":27.1,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":18.25,"detail":"percentile 0.9127"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD reference tagged Exploit; 1 Exploit-DB entry; 1 NVD exploit link"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}