EUVD-2016-5087

Malware in sbrugna...

EUVD-2016-6756

Malware in sbrugna...

EUVD-2016-9120

Malware in sbrugna...

CVE-2019-5226

P30, P30 Pro, Mate 20 smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193C00E190R2P1, versions earlier than VOGUE-AL00A 9.1.0.193C00E190R2P1, versions earlier than Hima-AL00B 9.1.0.135C00E133R2P1 and HiSuite with versions earlier than HiSuite 9.1.0.305 have a version downgrade...

PT-2019-17516

Name of the Vulnerable Software and Affected Versions Huawei P30 versions prior to ELLE-AL00B 9.1.0.193C00E190R2P1 Huawei P30 Pro versions prior to VOGUE-AL00A 9.1.0.193C00E190R2P1 Huawei Mate 20 versions prior to Hima-AL00B 9.1.0.135C00E133R2P1 Huawei HiSuite versions prior to 9.1.0.305...

PT-2019-17517

Name of the Vulnerable Software and Affected Versions Huawei P30 versions prior to ELLE-AL00B 9.1.0.193C00E190R2P1 Huawei P30 Pro versions prior to VOGUE-AL00A 9.1.0.193C00E190R2P1 Huawei Mate 20 versions prior to Hima-AL00B 9.1.0.135C00E133R2P1 Huawei HiSuite versions prior to 9.1.0.305...

PT-2019-17528

Name of the Vulnerable Software and Affected Versions Huawei HiSuite versions 9.1.0.300 and earlier Description The issue exists due to improper loading of a DLL file by HiSuite, allowing an attacker to load a DLL file of their choice, potentially executing arbitrary code. Recommendations For...

Huawei HiSuite DLL Hijacking Vulnerability

Vulnerability Description: Huawei HiSuite is a set of cell phone assistant software for PC from Huawei, China. A DLL hijacking vulnerability exists in Huawei HiSuite version 4.0.5.300OVE due to the program's lack of checking for loaded system DLL files. An attacker can exploit this vulnerability ...

Huawei HiSuite Information Disclosure Vulnerability

Huawei HiSuite is a set of cell phone assistant software for PC from Huawei, China. An information disclosure vulnerability exists in Huawei HiSuite version 4.0.5.300OVE, due to the password box in the proxy settings screen not disabling the copy function. An attacker can exploit this vulnerabili...

Huawei HiSuite Man-in-the-Middle Attack Vulnerability

Huawei HiSuite is a set of cell phone assistant software for PC from Huawei, China. A security vulnerability exists in Huawei HiSuite version 4.0.5.300OVE due to the program using unencrypted HTTP to download upgrade packages and failing to check the integrity of the packages before installation...

CVE-2016-8273

Huawei PC client software HiSuite 4.0.5.300OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing; an attacker can launch an MITM attack to interrupt or replace the downloaded software package and further compromise...

PT-2017-9588

Name of the Vulnerable Software and Affected Versions Huawei HiSuite version 4.0.5.300 OVE Description The issue concerns the use of insecure HTTP for software package downloads and the lack of integrity checks on the downloaded packages. This allows an attacker to potentially launch a...

PT-2017-9589

Name of the Vulnerable Software and Affected Versions Huawei HiSuite version 4.0.5.300 OVE Description The issue is related to a dynamic link library DLL hijack, where an attacker can make the system load malicious DLL files to execute arbitrary code. Recommendations For version 4.0.5.300 OVE, at...

Huawei HiSuite Local Code Execution Vulnerability

Huawei HiSuite is a set of cell phone assistant software for PC from Huawei, China. A local code execution vulnerability exists in Huawei HiSuite, which could be exploited by an attacker to execute arbitrary code...

Huawei HiSuite Man-in-the-Middle Security Bypass Vulnerability

Huawei HiSuite is a set of cell phone assistant software for PC from Huawei, China. A man-in-the-middle security bypass vulnerability exists in Huawei HiSuite, which could be exploited by attackers to bypass security restrictions and perform unauthorized operations, or conduct man-in-the-middle...

Huawei HiSuite Local Information Disclosure Vulnerability

Huawei HiSuite is a set of cell phone assistant software for PC from Huawei, China. A local information disclosure vulnerability exists in Huawei HiSuite, which can be exploited by attackers to obtain sensitive information...

CVE-2016-5821

Huawei HiSuite before 4.0.4.204ove Out of China and before 4.0.4.301 China use a weak ACL FILEWRITEDATA for BUILTIN\Users for the HiSuite service directory, which allows local users to gain SYSTEM privileges via a Trojan horse 1 SspiCli.dll or 2 USERENV.dll file or possibly other unspecified DLL...

Hardcoded credentials

Huawei HiSuite before 4.0.4.204ove Out of China and before 4.0.4.301 China use a weak ACL FILEWRITEDATA for BUILTIN\Users for the HiSuite service directory, which allows local users to gain SYSTEM privileges via a Trojan horse 1 SspiCli.dll or 2 USERENV.dll file or possibly other unspecified DLL...

CVE-2016-5821: Undefined Security Weakness

Huawei HiSuite before 4.0.4.204ove Out of China and before 4.0.4.301 China use a weak ACL FILEWRITEDATA for BUILTIN\Users for the HiSuite service directory, which allows local users to gain SYSTEM privileges via a Trojan horse 1 SspiCli.dll or 2 USERENV.dll file or possibly other unspecified DLL...

PT-2016-6696

Name of the Vulnerable Software and Affected Versions Huawei HiSuite versions prior to 4.0.4.204 ove Out of China Huawei HiSuite versions prior to 4.0.4.301 China Description The issue allows local users to gain SYSTEM privileges via a Trojan horse SspiCli.dll or USERENV.dll file or possibly othe...