Skip to content
Sign in
Not rated

CVE-2016-8273 Huawei PC client software HiSuite 4.0.5.300_OVE uses insecure HTTP for upgrade software package download and does not…

Description

Huawei PC client software HiSuite 4.0.5.300_OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing; an attacker can launch an MITM attack to interrupt or replace the downloaded software package and further compromise the PC.

Affected products and versions

Product Affected versions Fixed in
HiSuite 4.0.5.300_OVE Versions not published

Other CVEs of HiSuite 4.0.5.300_OVE

The 3 CVEs of HiSuite 4.0.5.300_OVE →
CVE-2016-8272 Huawei PC client software HiSuite 4.0.5.300_OVE has an information leak vulnerability; an attacker who can log in to the… Not rated CVE-2016-8274 Huawei PC client software HiSuite 4.0.5.300_OVE has a dynamic link library (DLL) hijack vulnerability; an attacker can… Not rated
Track this CVE