Filtered by vendor Huawei Subscriptions
Filtered by product Vmall Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2017-2694 1 Huawei 1 Vmall 2024-09-17 N/A
The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call. An attacker can construct a malicious application to call it. Consequently, alert music will be played suddenly, compromising user experience.
CVE-2017-8153 1 Huawei 1 Vmall 2024-09-17 N/A
Huawei VMall (for Android) with the versions before 1.5.8.5 have a privilege elevation vulnerability due to improper design. An attacker can trick users into installing a malicious app which can send out HTTP requests and execute JavaScript code in web pages without obtaining the Internet access permission. Successful exploit could lead to resource occupation or information leak.
CVE-2017-2739 1 Huawei 1 Vmall 2024-09-16 N/A
The upgrade package of Huawei Vmall APP Earlier than HwVmall 1.5.3.0 versions is transferred through HTTP. A man in the middle (MITM) can tamper with the upgrade package of Huawei Vmall APP, and to implant the malicious applications.