1. Home
  2. CVE Database
  3. CVE-2017-8153
HIGH · 7.1

CVE-2017-8153

Huawei VMall (for Android) with the versions before 1.5.8.5 have a privilege elevation vulnerability due to improper design. An attacker can trick users into installing a malicious app which can send ...

Vulnerability Description

Huawei VMall (for Android) with the versions before 1.5.8.5 have a privilege elevation vulnerability due to improper design. An attacker can trick users into installing a malicious app which can send out HTTP requests and execute JavaScript code in web pages without obtaining the Internet access permission. Successful exploit could lead to resource occupation or information leak.

CVSS Score

7.1

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
HuaweiVmall< 1.5.8.5

Related Weaknesses (CWE)

CWE-275

References

FAQ

What is CVE-2017-8153?

CVE-2017-8153 is a vulnerability with a CVSS score of 7.1 (HIGH). Huawei VMall (for Android) with the versions before 1.5.8.5 have a privilege elevation vulnerability due to improper design. An attacker can trick users into installing a malicious app which can send ...

How severe is CVE-2017-8153?

CVE-2017-8153 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-8153?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei Vmall.