Description
Flame II HSPA USB Modem contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path in 'C:\Program Files (x86)\Internet Telcel\ApplicationController.exe' to execute arbitrary code with elevated system privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Telcel | FLAME II MODEM USB | Unknown | — |
References
- ExploitDB-50708 exploit
- Archived Telcel Flame II MODEM USB Product Page product
- VulnCheck Advisory: FLAME II MODEM USB - Unquoted Service Path third-party-advisory