CVE-2017-8154
Medium
Description
The Themes App Honor 8 Lite Huawei mobile phones with software of versions before Prague-L31C576B172, versions before Prague-L31C530B160, versions before Prague-L31C432B180 has a man-in-the-middle (MITM) vulnerability due to the use of the insecure HTTP protocol for theme download. An attacker may exploit this vulnerability to tamper with downloaded themes.
SeverityMedium
CVSS5.3
Exploit probability31. percentile0.4%
ProductHuawei Honor 8 Lite Firmware
PublishedApr 11, 2018
First seenApr 11, 2018
How to fix
Update
- huawei honor_8_lite_firmwareprague-l31c530b160, prague-l31c576b172, prague-l31c432b180 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei honor_8_lite_firmware | v < prague-l31c530b160, v < prague-l31c576b172, v < prague-l31c432b180 | prague-l31c530b160, prague-l31c576b172, prague-l31c432b180 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.