CVE-2016-5821

CVE-2016-5821 describes a privilege escalation vulnerability in Huawei HiSuite versions prior to 4.0.4.204_ove (Out of China) and 4.0.4.301 (China). The vulnerability stems from weak Access Control Lists (ACLs) on the HiSuite service directory, allowing local users to achieve SYSTEM privileges by injecting malicious DLLs like SspiCli.dll or USERENV.dll. This is a high-severity vulnerability (CVSS 7.8) with low attack complexity, requiring local access but no user interaction, and potentially leading to full compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.