Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-2739

The upgrade package of Huawei Vmall APP Earlier than HwVmall 1.5.3.0 versions is transferred through HTTP. A man in the middle (MITM) can tamper with the upgrade package of Huawei

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
huawei

Description

The upgrade package of Huawei Vmall APP Earlier than HwVmall 1.5.3.0 versions is transferred through HTTP. A man in the middle (MITM) can tamper with the upgrade package of Huawei Vmall APP, and to implant the malicious applications.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Huawei Technologies Co., Ltd. Vmall

  • Earlier than HwVmall 1.5.3.0 versionsaffected

References