CVEvulnerability

CVE-2017-8154

5.3 MEDIUM Published 2018-04-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-04-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.3 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N
Weaknesses
CWE-319

Description

The Themes App Honor 8 Lite Huawei mobile phones with software of versions before Prague-L31C576B172, versions before Prague-L31C530B160, versions before Prague-L31C432B180 has a man-in-the-middle (MITM) vulnerability due to the use of the insecure HTTP protocol for theme download. An attacker may exploit this vulnerability to tamper with downloaded themes.

Affected configurations

• huawei honor 8 lite firmware (< prague-l31c530b160) • huawei honor 8 lite firmware (< prague-l31c576b172) • huawei honor 8 lite firmware (< prague-l31c432b180)

Related

Weakness · CWE (1)

  • CWE-319 Cleartext Transmission of Sensitive Information weakness

References