High severity · published Nov 22, 2017
CVE-2017-2704
Smarthome 1.0.2.364 and earlier versions,HiAPP 7.3.0.303 and earlier versions,HwParentControl 2.0.0 and earlier versions,HwParentControlParent 5.1.0.12 and earlier…
7.5
CVSS
0.6%
EPSS
No
On KEV
Description
Smarthome 1.0.2.364 and earlier versions,HiAPP 7.3.0.303 and earlier versions,HwParentControl 2.0.0 and earlier versions,HwParentControlParent 5.1.0.12 and earlier versions,Crowdtest 1.5.3 and earlier versions,HiWallet 8.0.0.301 and earlier versions,Huawei Pay 8.0.0.300 and earlier versions,Skytone 8.1.2.300 and earlier versions,HwCloudDrive(EMUI6.0) 8.0.0.307 and earlier versions,HwPhoneFinder(EMUI6.0) 9.3.0.310 and earlier versions,HwPhoneFinder(EMUI5.1) 9.2.2.303 and earlier versions,HiCinema 8.0.2.300 and earlier versions,HuaweiWear 21.0.0.360 and earlier versions,HiHealthApp 3.0.3.300 and earlier versions have an information exposure vulnerability. Encryption keys are stored in the system. The attacker can implement reverse engineering to obtain the encryption keys, causing information exposure.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 49% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CR
Crowdtest · Huawei
through 1.5.3 · source: NVD
HI
Hiapp · Huawei
through 7.3.0.303 · source: NVD
HI
Hicinema · Huawei
through 8.0.2.300 · source: NVD
HI
Hihealthapp · Huawei
through 3.0.3.300 · source: NVD
HI
Hiwallet · Huawei
through 8.0.0.301 · source: NVD
HP
Huawei Pay · Huawei
through 8.0.0.300 · source: NVD
HU
Huaweiwear · Huawei
through 21.0.0.360 · source: NVD
HW
Hwclouddrive(emui6.0) · Huawei
through 8.0.0.307 · source: NVD
HW
Hwparentcontrol · Huawei
through 2.0.0 · source: NVD
HW
Hwparentcontrolparent · Huawei
through 5.1.0.12 · source: NVD
HW
Hwphonefinder(emui5.1) · Huawei
through 9.2.2.303 · source: NVD
HW
Hwphonefinder(emui6.0) · Huawei
through 9.3.0.310 · source: NVD