What is CVE-2020-8948?

CVE-2020-8948 is a high-severity vulnerability in Sierrawireless Mobile Broadband Driver Package, classified under Improper Link Resolution Before File Access. CVSS score: 7.8/10. Published 2020-04-15.

How severe is CVE-2020-8948?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Sierrawireless Mobile Broadband Driver Package

CVE-2020-8948

The Sierra Wireless Windows Mobile Broadband Driver Packages (MBDP) before build 5043 allows an unprivileged user to overwrite arbitrary files in arbitrary folders using hard links. An unprivileged user could leverage this vulnerability to execute arbitrary code with system privileges.

EPSS: 0.005 (38.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Sierrawireless Mobile_broadband_driver_package
N/a — versions n/a

Weakness classification (CWE)

CWE-59 — Improper Link Resolution Before File Access

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2020-8948?: CVE-2020-8948 is a high-severity vulnerability in Sierrawireless Mobile Broadband Driver Package, classified under Improper Link Resolution Before File Access. CVSS score: 7.8/10. Published 2020-04-15.
How severe is CVE-2020-8948?: High severity. CVSS v3 base score is 7.8 out of 10.