CVE:CVE-2014-8359
CNNVD:CNNVD-201410-1286
Huawei Mobile Partner for Windows是中国华为（Huawei）公司的一款用于Windows平台下的3G上网卡客户端，它主要用于3G拨号上网。
Huawei Mobile Partner for Windows 23.009.05.03.1014版本中存在非信任搜索路径漏洞。本地攻击者可借助Mobile Partner目录下的Trojan horse wintab32.dll文件利用该漏洞执行任意代码，实施DLL劫持攻击。
solution:Upgrade huawei mobile_partner_firmware to a higher version than 23.009.05.03.1014,and avoid the version 23.009.05.03.1014; Upgrade huawei ec156 to a higher version than -; Upgrade huawei ec176 to a higher version than -; Upgrade huawei ec177 to a higher version than -