CVE-2016-8273: Improper Input Validation

Huawei PC client software HiSuite 4.0.5.300OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing; an attacker can launch an MITM attack to interrupt or replace the downloaded software package and further compromise...

Huawei HiSuite Man-in-the-Middle Security Bypass Vulnerability

Huawei HiSuite is a set of cell phone assistant software for PC from Huawei, China. A man-in-the-middle security bypass vulnerability exists in Huawei HiSuite, which could be exploited by attackers to bypass security restrictions and perform unauthorized operations, or conduct man-in-the-middle...

Huawei HiSuite Local Code Execution Vulnerability

Huawei HiSuite is a set of cell phone assistant software for PC from Huawei, China. A local code execution vulnerability exists in Huawei HiSuite, which could be exploited by an attacker to execute arbitrary code...

Huawei HiSuite Local Information Disclosure Vulnerability

Huawei HiSuite is a set of cell phone assistant software for PC from Huawei, China. A local information disclosure vulnerability exists in Huawei HiSuite, which can be exploited by attackers to obtain sensitive information...

Security Advisory - Multiple Security Vulnerabilities in Huawei HiSuite

Huawei HiSuite PC client software has an information leak vulnerability. The software provides the function for configuring the proxy server. The password textbox on the proxy configuration UI do not disable the password copy function. An attacker who can log in to the system can copy out the...

CVE-2016-5821

Huawei HiSuite before 4.0.4.204ove Out of China and before 4.0.4.301 China use a weak ACL FILEWRITEDATA for BUILTIN\Users for the HiSuite service directory, which allows local users to gain SYSTEM privileges via a Trojan horse 1 SspiCli.dll or 2 USERENV.dll file or possibly other unspecified DLL...

CVE-2016-5821

Huawei HiSuite before 4.0.4.204ove Out of China and before 4.0.4.301 China use a weak ACL FILEWRITEDATA for BUILTIN\Users for the HiSuite service directory, which allows local users to gain SYSTEM privileges via a Trojan horse 1 SspiCli.dll or 2 USERENV.dll file or possibly other unspecified DLL...

Hardcoded credentials

Huawei HiSuite before 4.0.4.204ove Out of China and before 4.0.4.301 China use a weak ACL FILEWRITEDATA for BUILTIN\Users for the HiSuite service directory, which allows local users to gain SYSTEM privileges via a Trojan horse 1 SspiCli.dll or 2 USERENV.dll file or possibly other unspecified DLL...

CVE-2016-5821

Huawei HiSuite before 4.0.4.204ove Out of China and before 4.0.4.301 China use a weak ACL FILEWRITEDATA for BUILTIN\Users for the HiSuite service directory, which allows local users to gain SYSTEM privileges via a Trojan horse 1 SspiCli.dll or 2 USERENV.dll file or possibly other unspecified DLL...

CVE-2016-5821

CVE-2016-5821 affects Huawei HiSuite for Windows. A local attacker can exploit insecure ACLs on the HiSuite service directory to perform DLL hijacking (via SspiCli.dll or USERENV.dll, among others) and escalate to SYSTEM. Affected versions include HiSuite up to 4.0.3.301 (and variants like 4.0.4....

CVE-2016-5821: Undefined Security Weakness

Huawei HiSuite before 4.0.4.204ove Out of China and before 4.0.4.301 China use a weak ACL FILEWRITEDATA for BUILTIN\Users for the HiSuite service directory, which allows local users to gain SYSTEM privileges via a Trojan horse 1 SspiCli.dll or 2 USERENV.dll file or possibly other unspecified DLL...

Huawei HiSuite Arbitrary Installation Vulnerability

Huawei HiSuite is a set of cell phone assistant software for PC from Huawei, China. A security vulnerability exists in Huawei HiSuite, which can be exploited by an attacker to install arbitrary applications on a connected phone...

CVE-2016-4086

Huawei HiSuite In China before 4.0.4.301 and Out of China before 4.0.4.204ove allows remote attackers to install arbitrary apps on a connected phone via unspecified vectors...

CVE-2016-4086

Huawei HiSuite In China before 4.0.4.301 and Out of China before 4.0.4.204ove allows remote attackers to install arbitrary apps on a connected phone via unspecified vectors...

Code injection

Huawei HiSuite In China before 4.0.4.301 and Out of China before 4.0.4.204ove allows remote attackers to install arbitrary apps on a connected phone via unspecified vectors...

CVE-2016-4086

CVE-2016-4086 affects Huawei HiSuite (China: before 4.0.4.301; outside China: before 4.0.4.204_ove). The vulnerability is described as a permission control flaw in HiSuite that allows an unauthenticated attacker on the local network (LAN) to remotely install arbitrary apps on a connected Huawei p...

CVE-2016-4086

Huawei HiSuite In China before 4.0.4.301 and Out of China before 4.0.4.204ove allows remote attackers to install arbitrary apps on a connected phone via unspecified vectors...

CVE-2016-4086: Undefined Security Weakness

Huawei HiSuite In China before 4.0.4.301 and Out of China before 4.0.4.204ove allows remote attackers to install arbitrary apps on a connected phone via unspecified vectors...

Huawei HiSuite Arbitrary Code Execution Vulnerability

Huawei HiSuite is a set of cell phone assistant software for PC from Huawei, China. An arbitrary code execution vulnerability exists in Huawei HiSuite 4.0.3.301 and earlier versions, which originates from the program failing to properly load a DLL file. A local attacker can exploit this...

Huawei HiSuite For Windows 4.0.3.301 Privilege Escalation

Vendor: Huawei, www.huawei.com Affected Product: HiSuite for Windows Affected Version: = 4.0.3.301 CVE ID: CVE-2016-5821 OVE ID: OVE-20160624-0001 Severity: High Author: Benjamin Gnahm @mitp0sh, Blue Frost Security GmbH Title: Huawei HiSuite Insecure Service Directory ACLs A privilege escalation...