Huawei HiSuite 4.0.5.300_OVE vulnerabilities
3 known CVE vulnerabilities in Huawei HiSuite 4.0.5.300_OVE, translated and rated.
- CVE-2016-8274High
Huawei PC client software HiSuite 4.0.5.300_OVE has a DLL hijack vulnerability. An attacker can make the system load malicious DLL files to execute arbitrary code.
- CVE-2016-8273High
Huawei PC client software HiSuite 4.0.5.300_OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing. This allows an attacker to launch a MITM attack, potentially compromising the PC.
- CVE-2016-5821High
Huawei HiSuite versions before 4.0.4.204_ove (Out of China) and before 4.0.4.301 (China) use a weak ACL (FILE_WRITE_DATA for BUILTIN\Users) for the HiSuite service directory. This allows local users to gain SYSTEM privileges via a Trojan horse, such as SspiCli.dll or USERENV.dll files.