What’s Vulnerable › Vulnerabilities

CVE-2017-8154

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-04-11 · updated 2026-06-17
• Weakness: CWE-319

Description

The Themes App Honor 8 Lite Huawei mobile phones with software of versions before Prague-L31C576B172, versions before Prague-L31C530B160, versions before Prague-L31C432B180 has a man-in-the-middle (MITM) vulnerability due to the use of the insecure HTTP protocol for theme download. An attacker may exploit this vulnerability to tamper with downloaded themes.

Affected products

• Huawei Technologies Co., Ltd. Honor 8 Lite: before prague-l31c530b160; before prague-l31c576b172; before prague-l31c432b180 — fixed in prague-l31c432b180, prague-l31c530b160, prague-l31c576b172

How to fix

Upgrade to a fixed version: Huawei Technologies Co., Ltd. Honor 8 Lite prague-l31c432b180, prague-l31c530b160, prague-l31c576b172. Check the vendor advisory for mitigations.

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170908-01-smartphone-en
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170908-01-smartphone-en

Get alerted when CVE-2017-8154 or the next vulnerability affects your stack