CVE-2014-8359

Untrusted search path vulnerability in Huawei Mobile Partner for Windows 23.009.05.03.1014 allows...

7.2 HighPublic exploit

Untrusted search path vulnerability in Huawei Mobile Partner for Windows 23.009.05.03.1014 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll in the Mobile Partner directory.

Exploit likelihood

1.30%Down 0.3 points since Feb 4, 2022

What each source reports

NVD Score used 7.2

Record: CVE-2014-8359
CVSS 2.0: 7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness: CWE-264
Updated: 2026-11-02

CVE List No score

Record: CVE-2014-8359
Updated: 2026-11-02

EUVDEUVD-2014-8196 No score

Record: EUVD-2014-8196
Updated: 2026-11-03

GitHub AdvisoriesGHSA-c32c-76vg-vg23 No score

Untrusted search path vulnerability in Huawei Mobile Partner for Windows 23.009.05.03.1014 allows...

Record: GHSA-c32c-76vg-vg23
Updated: 2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Huawei Technologies du Mobile Broadband 16.0 - Local Privilege Escalation	2013-12-24

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-8359 is a high vulnerability (CVSS 7.2) in Huawei Ec156, published November 13, 2014. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.30%, the 70th percentile. No source names a fixed version.