Vmall (Huawei) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2017-11-22. Vendor: Huawei.

CVEs of Vmall

• CVE-2017-8153 - CVSS 7.1 (high), 2017-11-22: Huawei VMall (for Android) with the versions before 1.5.8.5 have a privilege elevation vulnerability due to improper design. An attacker can trick users into…
• CVE-2017-2739 - CVSS 3.1 (low), 2017-11-22: The upgrade package of Huawei Vmall APP Earlier than HwVmall 1.5.3.0 versions is transferred through HTTP. A man in the middle (MITM) can tamper with the…
• CVE-2017-2694 - CVSS 3.3 (low), 2017-11-22: The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call.…