CVE-2016-8273

Huawei PC client software HiSuite 4.0.5.300_OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing; an attacker can launch an MITM attack to interrupt or replace the downloaded software package and further compromise the PC.

Score

CVSS 3.0 7.8 High

Status

Modified - psirt@huawei.com

Published

2017-04-02

Last modified

2024-08-06

Weaknesses

CWE-20, CWE-284

Affected products

• Hisuite (Huawei)

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160905-01-hisuite-en