CVE-2014-8358: Huawei EC156 Firmware

High severity, CVSS 7.8. EPSS: 5% chance of exploitation in the next 30 days.

Huawei EC156, EC176, and EC177 USB Modem products with software before UTPS-V200R003B015D02SP07C1014 (23.015.02.07.1014) and before V200R003B015D02SP08C1014 (23.015.02.08.1014) use a weak ACL for the "Mobile Partner" directory, which allows remote attackers to gain SYSTEM privileges by compromising a low privilege account and modifying Mobile Partner.exe.

Affected products

• Huawei EC156 Firmware: version v200r003b009d05sp03c1014 only
• Huawei EC176 Firmware: version v200r003b009d05sp03c1014 only
• Huawei EC177 Firmware: version v200r003b009d05sp03c1014 only

Published 2017-12-11. Last modified 2026-06-17.