Vmall Security Vulnerabilities
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information...
5.5CVSS
5.3AI Score
0.0004EPSS
Huawei VMall (for Android) with the versions before 1.5.8.5 have a privilege elevation vulnerability due to improper design. An attacker can trick users into installing a malicious app which can send out HTTP requests and execute JavaScript code in web pages without obtaining the Internet access...
7.1CVSS
6.9AI Score
0.001EPSS
The upgrade package of Huawei Vmall APP Earlier than HwVmall 1.5.3.0 versions is transferred through HTTP. A man in the middle (MITM) can tamper with the upgrade package of Huawei Vmall APP, and to implant the malicious...
3.1CVSS
4.2AI Score
0.0005EPSS
The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call. An attacker can construct a malicious application to call it. Consequently, alert music will be played suddenly, compromising user...
3.3CVSS
4AI Score
0.001EPSS