Huawei Vmall vulnerabilities

3 vulnerabilities

Known vulnerabilities in Huawei Vmall, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

3.1CVE-2017-2739huawei technologies co., ltd.vmall+1
EPSS score
0.18%
The upgrade package of Huawei Vmall APP Earlier than HwVmall 1.5.3.0 versions is transferred through HTTP. A man in the middle (MITM) can tamper with the upgrade package of Huawei Vmall APP, and to implant the malicious applications.4.3CVE-2017-2694huawei technologies co., ltd.hwvmall+1
EPSS score
0.52%
The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call. An attacker can construct a malicious application to call it. Consequently, alert music will be played suddenly, compromising user experience.7.1CVE-2017-8153huawei technologies co., ltd.vmall (for android)+1
EPSS score
0.61%
Huawei VMall (for Android) with the versions before 1.5.8.5 have a privilege elevation vulnerability due to improper design. An attacker can trick users into installing a malicious app which can send out HTTP requests and execute JavaScript code in web pages without obtaining the Internet access permission. Successful exploit could lead to resource occupation or information leak.