7.5

CVE-2017-2704

Smarthome 1.0.2.364 and earlier versions,HiAPP 7.3.0.303 and earlier versions,HwParentControl 2.0.0 and earlier versions,HwParentControlParent 5.1.0.12 and earlier versions,Crowdtest 1.5.3 and earlier versions,HiWallet 8.0.0.301 and earlier versions,Huawei Pay 8.0.0.300 and earlier versions,Skytone 8.1.2.300 and earlier versions,HwCloudDrive(EMUI6.0) 8.0.0.307 and earlier versions,HwPhoneFinder(EMUI6.0) 9.3.0.310 and earlier versions,HwPhoneFinder(EMUI5.1) 9.2.2.303 and earlier versions,HiCinema 8.0.2.300 and earlier versions,HuaweiWear 21.0.0.360 and earlier versions,HiHealthApp 3.0.3.300 and earlier versions have an information exposure vulnerability. Encryption keys are stored in the system. The attacker can implement reverse engineering to obtain the encryption keys, causing information exposure.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Smarthome Version <= 1.0.2.364
Huawei ≫ Hiapp Version <= 7.3.0.303
Huawei ≫ Hwparentcontrol Version <= 2.0.0
Huawei ≫ Hwparentcontrolparent Version <= 5.1.0.12
Huawei ≫ Crowdtest Version <= 1.5.3
Huawei ≫ Hiwallet Version <= 8.0.0.301
Huawei ≫ Huawei Pay Version <= 8.0.0.300
Huawei ≫ Skytone Version <= 8.1.2.300
Huawei ≫ Hicinema Version <= 8.0.2.300
Huawei ≫ Huaweiwear Version <= 21.0.0.360
Huawei ≫ Hihealthapp Version <= 3.0.3.300
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.6% 0.441
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-encryption-en
Vendor Advisory