CVSS 3.0
7.8 highCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2017-9247
Multiple unquoted service path vulnerabilities in Sierra Wireless Windows Mobile Broadband Driver Package (MBDP) with build ID < 4657 allows local users to launch processes with elevated privileges.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
- CWE
- CWE-428
- Published
- Modified
- Record from
- the NVD, synced
Affected
- sierrawireless:sierra_wireless_em7345_software
- sierrawireless:sierra_wireless_em7455_software
- sierrawireless:sierra_wireless_location_sensor_driver
References
- http://support.lenovo.com/us/en/product_security/LEN-12739
- https://source.sierrawireless.com/resources/airprime/software/cve-2017-9247-unquoted-service-path-vulnerabilities/
- http://support.lenovo.com/us/en/product_security/LEN-12739
- https://source.sierrawireless.com/resources/airprime/software/cve-2017-9247-unquoted-service-path-vulnerabilities/