QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2016-8273

Back to search

CVE-2016-8273

Published: Apr 2, 2017

Modified: Aug 6, 2024

PUBLISHED

Description

Huawei PC client software HiSuite 4.0.5.300_OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing; an attacker can launch an MITM attack to interrupt or replace the downloaded software package and further compromise the PC.

VendorProductVersions

n/a

HiSuite 4.0.5.300_OVE

affected
HiSuite 4.0.5.300_OVE

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now