← Back

CVE-2017-8154

nvd nist
Published: Apr 11, 2018Modified: Nov 21, 2024

JSON object

Loading...
5.3
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
Exploitability: 1.6 / Impact: 3.6
Source: NVD

Description

The Themes App Honor 8 Lite Huawei mobile phones with software of versions before Prague-L31C576B172, versions before Prague-L31C530B160, versions before Prague-L31C432B180 has a man-in-the-middle (MITM) vulnerability due to the use of the insecure HTTP protocol for theme download. An attacker may exploit this vulnerability to tamper with downloaded themes.

Affected (3)

Huawei
1 product
Honor 8 Lite Firmware
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Honor 8 Lite Firmware
Before prague-l31c530b160
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Honor 8 Lite Firmware
Before prague-l31c576b172
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Honor 8 Lite Firmware
Before prague-l31c432b180
Running on/withPlatform Versions
Huawei
Honor 8 Lite
All versions

Related CWEs

CWE-319
Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

References (2)

Source: psirt@huawei.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.