Huawei HiSuite Man-in-the-Middle Attack Vulnerability

Huawei HiSuite is a set of cell phone assistant software for PC from Huawei, China. A security vulnerability exists in Huawei HiSuite version 4.0.5.300OVE due to the program using unencrypted HTTP to download upgrade packages and failing to check the integrity of the packages before installation...

Huawei HiSuite DLL Hijacking Vulnerability

Vulnerability Description: Huawei HiSuite is a set of cell phone assistant software for PC from Huawei, China. A DLL hijacking vulnerability exists in Huawei HiSuite version 4.0.5.300OVE due to the program's lack of checking for loaded system DLL files. An attacker can exploit this vulnerability ...

CVE-2016-8274

Huawei PC client software HiSuite 4.0.5.300OVE has a dynamic link library DLL hijack vulnerability; an attacker can make the system load malicious DLL files to execute arbitrary code...

CVE-2016-8274

Huawei PC client software HiSuite 4.0.5.300OVE has a dynamic link library DLL hijack vulnerability; an attacker can make the system load malicious DLL files to execute arbitrary code...

CVE-2016-8272

Huawei PC client software HiSuite 4.0.5.300OVE has an information leak vulnerability; an attacker who can log in to the system can copy out the user's proxy password, causing information leaks...

CVE-2016-8273

Huawei PC client software HiSuite 4.0.5.300OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing; an attacker can launch an MITM attack to interrupt or replace the downloaded software package and further compromise...

Design/Logic Flaw

Huawei PC client software HiSuite 4.0.5.300OVE has a dynamic link library DLL hijack vulnerability; an attacker can make the system load malicious DLL files to execute arbitrary code...

Design/Logic Flaw

Huawei PC client software HiSuite 4.0.5.300OVE has an information leak vulnerability; an attacker who can log in to the system can copy out the user's proxy password, causing information leaks...

CVE-2016-8272

Huawei PC client software HiSuite 4.0.5.300OVE has an information leak vulnerability; an attacker who can log in to the system can copy out the user's proxy password, causing information leaks...

CVE-2016-8273

Huawei PC client software HiSuite 4.0.5.300OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing; an attacker can launch an MITM attack to interrupt or replace the downloaded software package and further compromise...

CVE-2016-8272

Huawei PC client software HiSuite 4.0.5.300OVE has an information leak vulnerability; an attacker who can log in to the system can copy out the user's proxy password, causing information leaks...

CVE-2016-8273

Huawei PC client software HiSuite 4.0.5.300OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing; an attacker can launch an MITM attack to interrupt or replace the downloaded software package and further compromise...

CVE-2016-8272

Huawei HiSuite on Windows (version 4.0.5.300_OVE) contains an information disclosure flaw in the proxy settings UI: the password textbox does not disable copy, enabling an attacker who can log in to copy the user’s proxy password. CNVD-2017-05240 confirms the vulnerability in HiSuite 4.0.5.300_OV...

CVE-2016-8273

Huawei PC client software HiSuite 4.0.5.300OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing; an attacker can launch an MITM attack to interrupt or replace the downloaded software package and further compromise...

CVE-2016-8273

Huawei HiSuite PC client (version 4.0.5.300_OVE) is vulnerable due to using insecure HTTP to download upgrade packages and not validating package integrity. This allows a local attacker to conduct a man‑in‑the‑middle attack to interrupt or replace the downloaded software, potentially compromising...

CVE-2016-8274

CVE-2016-8274 refers to a DLL hijacking vulnerability in Huawei HiSuite PC client software, specifically version 4.0.5.300_OVE. The root cause is insufficient verification of loaded system DLL files, which can allow an attacker to cause the system to load a malicious DLL and execute arbitrary cod...

CVE-2016-8272

Huawei PC client software HiSuite 4.0.5.300OVE has an information leak vulnerability; an attacker who can log in to the system can copy out the user's proxy password, causing information leaks...

CVE-2016-8274

Huawei PC client software HiSuite 4.0.5.300OVE has a dynamic link library DLL hijack vulnerability; an attacker can make the system load malicious DLL files to execute arbitrary code...

CVE-2016-8274: Improper Access Control

Huawei PC client software HiSuite 4.0.5.300OVE has a dynamic link library DLL hijack vulnerability; an attacker can make the system load malicious DLL files to execute arbitrary code...

CVE-2016-8272: Exposure of Sensitive Information to an Unauthorized Actor

Huawei PC client software HiSuite 4.0.5.300OVE has an information leak vulnerability; an attacker who can log in to the system can copy out the user's proxy password, causing information leaks...