CVE-2017-2739 The upgrade package of Huawei Vmall APP Earlier than HwVmall 1.5.3.0 versions is transferred through HTTP. A man in the middle (MITM) can tamper with the upgrade package of Huawei Vmall APP, and to im...
LowCVSS 3.1
EPSS 0.18%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The upgrade package of Huawei Vmall APP Earlier than HwVmall 1.5.3.0 versions is transferred through HTTP. A man in the middle (MITM) can tamper with the upgrade package of Huawei Vmall APP, and to implant the malicious applications.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Huawei vmall | < 1.5.3.0 | 1.5.3.0 |
| Huawei Technologies Co., Ltd. Vmall | = Earlier than HwVmall 1.5.3.0 versions | No fix listed |
References
- www.huawei.com vendor-advisory