Vulnerabilities > Huawei > Vmall > Low

DATE CVE VULNERABILITY TITLE RISK
2017-11-22 CVE-2017-2694 Permission Issues vulnerability in Huawei Vmall
The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call.
local
low complexity
huawei CWE-275
3.3
2017-11-22 CVE-2017-2739 Download of Code Without Integrity Check vulnerability in Huawei Vmall 1.5.2.0
The upgrade package of Huawei Vmall APP Earlier than HwVmall 1.5.3.0 versions is transferred through HTTP.
high complexity
huawei CWE-494
3.1