CVE-2017-2730

Low

Description

HUAWEI HiLink APP (for IOS) versions earlier before 5.0.25.306 and HUAWEI Tech Support APP (for IOS) versions earlier before 5.0.0 have an information leak vulnerability. When an iPhone with these APPs installed access the Wi-Fi hotpot built by attacker, the attacker can collect the information of iPhone mode and firmware version.

SeverityLow
CVSS3.5
Exploit probability—
ProductHuawei Hilink
PublishedNov 22, 2017
First seenNov 22, 2017

How to fix

Update
  • huawei hilink5.0.25.306 or later
  • huawei tech_support5.0.0 or later

Affected products

ProductAffected versionsFixed in
huawei hilinkv < 5.0.25.3065.0.25.306
huawei tech_supportv < 5.0.05.0.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2017-2730 · Huawei Hilink · Dark Radar