description: The upgrade package of Huawei Vmall APP Earlier than HwVmall 1.5.3.0 versions is transferred through HTTP. A man in the middle (MITM) can tamper with the upgrade package of Huawei Vmall APP, and to implant the malicious applications.
problem types: MITM
affected:
{
product: Vmall
vendor: Huawei Technologies Co., Ltd.
versions:
status: affected, version: Earlier than HwVmall 1.5.3.0 versions
}