Vulnerability Details CVE-2017-8154
The Themes App Honor 8 Lite Huawei mobile phones with software of versions before Prague-L31C576B172, versions before Prague-L31C530B160, versions before Prague-L31C432B180 has a man-in-the-middle (MITM) vulnerability due to the use of the insecure HTTP protocol for theme download. An attacker may exploit this vulnerability to tamper with downloaded themes.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 17.5%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 2.6
References
Products affected by CVE-2017-8154
-
cpe:2.3:h:huawei:honor_8_lite:-
-
cpe:2.3:o:huawei:honor_8_lite_firmware:prague-l03c605b161
-
cpe:2.3:o:huawei:honor_8_lite_firmware:prague-l23c605b160
-
cpe:2.3:o:huawei:honor_8_lite_firmware:prague-l31c432b180
-
cpe:2.3:o:huawei:honor_8_lite_firmware:prague-l31c530b160