CVE-2016-8273

Huawei PC client software HiSuite 4.0.5.300OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing; an attacker can launch an MITM attack to interrupt or replace the downloaded software package and further compromise...

CVE-2016-8273

Huawei HiSuite PC client (version 4.0.5.300_OVE) is vulnerable due to using insecure HTTP to download upgrade packages and not validating package integrity. This allows a local attacker to conduct a man‑in‑the‑middle attack to interrupt or replace the downloaded software, potentially compromising...

Security Advisory - Multiple Security Vulnerabilities in Huawei HiSuite

Huawei HiSuite PC client software has an information leak vulnerability. The software provides the function for configuring the proxy server. The password textbox on the proxy configuration UI do not disable the password copy function. An attacker who can log in to the system can copy out the...