CVE-2017-2739

2017-11-1500:00:00

huawei

www.cve.org

3.9 Low

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.3%

JSON

The upgrade package of Huawei Vmall APP Earlier than HwVmall 1.5.3.0 versions is transferred through HTTP. A man in the middle (MITM) can tamper with the upgrade package of Huawei Vmall APP, and to implant the malicious applications.

CNA Affected

[
  {
    "product": "Vmall",
    "vendor": "Huawei Technologies Co., Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "Earlier than HwVmall 1.5.3.0 versions"
      }
    ]
  }
]