CVE-2017-8154

The Themes App Honor 8 Lite Huawei mobile phones with software of versions before Prague-L31C576B172, versions before Prague-L31C530B160, versions before Prague-L31C432B180 has a man-in-the-middle (MITM) vulnerability due to the use of the insecure HTTP protocol for theme download. An attacker may exploit this vulnerability to tamper with downloaded themes.

Score

CVSS 3.0 5.3 Medium

Status

Modified - psirt@huawei.com

Published

2018-04-11

Last modified

2024-08-05

Weaknesses

CWE-319

Affected products

• Honor 8 Lite Firmware (Huawei)
• Honor 8 Lite (Huawei Technologies Co. Ltd.)

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170908-01-smartphone-en