CoreCVE
Back

HIGH

Huawei PC client software HiSuite 4.0.5.300_OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing; an attacker can launch an MITM attack to interrupt or replace the downloaded software package and further compromise the PC

Published Apr 2, 2017

Description

Huawei PC client software HiSuite 4.0.5.300_OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing; an attacker can launch an MITM attack to interrupt or replace the downloaded software package and further compromise the PC.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (2)

CWE-20

Improper Input Validation

CWE-284

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner huawei
Published Apr 2, 2017
Updated Aug 6, 2024
Reserved Sep 18, 2016
Link CVE-2016-8273
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2016-8273
Red Hat
Severity n/a
Public date n/a
Links CVE-2016-8273