Huawei Hisuite vulnerabilities

8 CVEs affecting Huawei Hisuite, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-9100, published 2020-07-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-5245, published 2019-06-13. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. HiSuite 9.1.0.300 versions and earlier contains a DLL hijacking vulnerability. This vulnerability exists due to some DLL file is loaded by HiSuite improperly. And it allows an attacker to load this…
CVE-2020-9100, published 2020-07-06. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Earlier than HiSuite 10.1.0.500 have a DLL hijacking vulnerability. This vulnerability exists due to some DLL file is loaded by HiSuite improperly. And it allows an attacker to load this DLL file of…
CVE-2016-4086, published 2016-06-30. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. Huawei HiSuite (In China) before 4.0.4.301 and (Out of China) before 4.0.4.204_ove allows remote attackers to install arbitrary apps on a connected phone via unspecified vectors.
CVE-2016-5821, published 2016-07-13. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Huawei HiSuite before 4.0.4.204_ove (Out of China) and before 4.0.4.301 (China) use a weak ACL (FILE_WRITE_DATA for BUILTIN\Users) for the HiSuite service directory, which allows local users to gain…
CVE-2019-5263, published 2019-11-29. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. HiSuite with 9.1.0.305 and earlier versions and 9.1.0.305(MAC) and earlier versions and HwBackup with earlier versions before 9.1.1.308 have a brute forcing encrypted backup data vulnerability.…
CVE-2016-8274, published 2017-04-02. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Huawei PC client software HiSuite 4.0.5.300_OVE has a dynamic link library (DLL) hijack vulnerability; an attacker can make the system load malicious DLL files to execute arbitrary code.
CVE-2016-8273, published 2017-04-02. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Huawei PC client software HiSuite 4.0.5.300_OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing; an attacker can…
CVE-2016-8272, published 2017-04-02. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. Huawei PC client software HiSuite 4.0.5.300_OVE has an information leak vulnerability; an attacker who can log in to the system can copy out the user's proxy password, causing information leaks.