cve.bz

huawei vmall vulnerabilities, newest first

Filter
  1. 7.1CVE-2017-8153EPSS 0.6%

    Huawei VMall (for Android) with the versions before 1.5.8.5 have a privilege elevation vulnerability due to improper design. An attacker can trick users into installing a malicious app which can send out HTTP requests and execute JavaScrip…

  2. 3.1CVE-2017-2739EPSS 0.2%

    The upgrade package of Huawei Vmall APP Earlier than HwVmall 1.5.3.0 versions is transferred through HTTP. A man in the middle (MITM) can tamper with the upgrade package of Huawei Vmall APP, and to implant the malicious applications.

  3. 3.3CVE-2017-2694EPSS 0.5%

    The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call. An attacker can construct a malicious application to call it. Consequently, alert …