Описание
Huawei PC client software HiSuite 4.0.5.300_OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing; an attacker can launch an MITM attack to interrupt or replace the downloaded software package and further compromise the PC.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:huawei:hisuite:4.0.5.300_ove:*:*:*:*:*:*:*
EPSS
Процентиль: 3%
0.00015
Низкий
7.8 High
CVSS3
6.9 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
CVSS3: 7.8
github
больше 3 лет назад
Huawei PC client software HiSuite 4.0.5.300_OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing; an attacker can launch an MITM attack to interrupt or replace the downloaded software package and further compromise the PC.
EPSS
Процентиль: 3%
0.00015
Низкий
7.8 High
CVSS3
6.9 Medium
CVSS2
Дефекты
CWE-20