CVE-2014-2271
High
Description
cn.wps.moffice.common.beans.print.CloudPrintWebView in Kingsoft Office 5.3.1, as used in Huawei P2 devices before V100R001C00B043, falls back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and execute arbitrary Java code by leveraging a network position between the client and the registry to block HTTPS traffic.
SeverityHigh
CVSS8.1
Exploit probability—
ProductWps Office
PublishedJan 14, 2020
First seenJan 14, 2020
How to fix
Update
- huawei p2-6011_firmwarev100r001c00b043 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wps wps_office | 5.3.1 | — |
| huawei p2-6011_firmware | v < v100r001c00b043 | v100r001c00b043 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.