This vulnerability, registered as “CVE-2018-17153,” can allow for unauthorised actors to bypass authentication and register their activity on a specific IP address as an administrator.
The two vulnerabilities have been registered as “CVE-2018-1149” and “CVE-2018-1150” and are linked to the third-party vendor software installed on the device.
The first vulnerability, CVE-2018-1149, is an unauthenticated stack buffer overflow which allows for remote code execution with root/administrator privileges.
This vulnerability, registered as “CVE-2018-14327,” allows a low-privileged user account to escalate privileges on any Windows machine that had connected to the EE Mini modem via USB.
The two vulnerabilities have been registered as “CVE-2018-1149” and “CVE-2018-1150” and are linked to the third-party vendor software installed on the device.
The second vulnerability, CVE-2018-1150, is a backdoor that is believed to be caused by leftover debug code, and allows the list of all user accounts on a system to be accessible with their passwords capable of being manipulated.
Machine-matchedMachine-matchedFound by keyword or pattern matching over threat-report text. Not reviewed by a person. TRAM2 annotated sentence label.Labelled by dataset annotators
This vulnerability, registered as “CVE-2018-14327,” allows a low-privileged user account to escalate privileges on any Windows machine that had connected to the EE Mini modem via USB. The vulnerability is located in the driver files installed by the modem onto Windows machines, where the folder permissions allow anyone