CVE-2017-2730
LOWHUAWEI HiLink & Tech Support iOS < 5.0.25.306/5.0.0 - Unauthorized Information Exposure via Wi-Fi
Title source: llmDescription
HUAWEI HiLink APP (for IOS) versions earlier before 5.0.25.306 and HUAWEI Tech Support APP (for IOS) versions earlier before 5.0.0 have an information leak vulnerability. When an iPhone with these APPs installed access the Wi-Fi hotpot built by attacker, the attacker can collect the information of iPhone mode and firmware version.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170310-01-hilinkapp-en
Scores
CVSS v3
3.5
EPSS
0.0004
EPSS Percentile
11.2%
Attack Vector
ADJACENT_NETWORK
CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Details
CWE
CWE-200
Status
published
Products (3)
huawei/hilink
< 5.0.25.306
huawei/tech_support
< 5.0.0
Huawei Technologies Co., Ltd./HUAWEI HiLink APP (for IOS), HUAWEI Tech Support APP (for IOS)
HUAWEI HiLink APP (for IOS) Versions earlier before 5.0.25.306, HUAWEI Tech Support APP (for IOS) Ve
Published
Nov 22, 2017
Tracked Since
Feb 18, 2026