Code injection

2017-11-2219:29:00

PRIOn knowledge base

www.prio-n.com

4 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.2%

JSON

The upgrade package of Huawei Vmall APP Earlier than HwVmall 1.5.3.0 versions is transferred through HTTP. A man in the middle (MITM) can tamper with the upgrade package of Huawei Vmall APP, and to implant the malicious applications.

CPENameOperatorVersion
vmalllt1.5.3.0

CPE	Name	Operator	Version
	vmall	lt	1.5.3.0

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20170208-01-vmall-en