CVE-2015-0974: Untrusted search path vulnerability in ZTE Datacard MF19 0V1.0.0B04 allows local users to gain privilege by...

Security readout for executives and security teams

CVE-2015-0974 is a local privilege escalation issue in ZTE Datacard MF19 0V1.0.0B04. A local user may be able to abuse how the software searches for DLL files if they can modify the "Ucell Internet" directory. Business urgency depends on whether this old datacard software still exists on managed endpoints. Exposure is likely limited to endpoints where ZTE Datacard MF19 0V1.0.0B04 or related "Ucell Internet" software remains installed. The official affected-product metadata is incomplete, so inventory confirmation is required before prioritizing broad remediation. Treat this as a targeted endpoint hygiene issue, not an internet-wide emergency. Prioritize discovery first, then remove or harden any remaining installations because local privilege escalation can help an attacker deepen access after initial foothold. Mitigation focus: Check ZTE or carrier guidance for any fixed installer or removal advice.; Remove the affected datacard software where it is no longer operationally required.; Restrict non-administrator write access to the application directory..

Prepared

Jun 12, 2026, 21:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.