Vulnerability Description
The Themes App Honor 8 Lite Huawei mobile phones with software of versions before Prague-L31C576B172, versions before Prague-L31C530B160, versions before Prague-L31C432B180 has a man-in-the-middle (MITM) vulnerability due to the use of the insecure HTTP protocol for theme download. An attacker may exploit this vulnerability to tamper with downloaded themes.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Honor 8 Lite Firmware | < prague-l31c530b160 |
| Huawei | Honor 8 Lite | - |
Related Weaknesses (CWE)
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170908-01-smartphVendor Advisory
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170908-01-smartphVendor Advisory
FAQ
What is CVE-2017-8154?
CVE-2017-8154 is a vulnerability with a CVSS score of 5.3 (MEDIUM). The Themes App Honor 8 Lite Huawei mobile phones with software of versions before Prague-L31C576B172, versions before Prague-L31C530B160, versions before Prague-L31C432B180 has a man-in-the-middle (MI...
How severe is CVE-2017-8154?
CVE-2017-8154 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-8154?
Check the references section above for vendor advisories and patch information. Affected products include: Huawei Honor 8 Lite Firmware, Huawei Honor 8 Lite.