PT-2017-15517 · Huawei+1 · Huawei Tech Support App+2

Zack Whittaker · Publicado 2017-10-27 · Atualizado 2017-12-11 · CVE-2017-2730

Positive Technologies (AI Summary)

CVSS v3.1

3.5

Baixa

Vetor base

AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions HUAWEI HiLink APP (for IOS) versions prior to 5.0.25.306 HUAWEI Tech Support APP (for IOS) versions prior to 5.0.0

Description The issue allows an attacker to collect information about the iPhone model and firmware version when an iPhone with the affected apps installed connects to a Wi-Fi hotspot built by the attacker.

Recommendations For HUAWEI HiLink APP (for IOS) versions prior to 5.0.25.306, update to version 5.0.25.306 or later. For HUAWEI Tech Support APP (for IOS) versions prior to 5.0.0, update to version 5.0.0 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-2730

MGASA-2017-0390

Produtos afetados

Huawei Hilink App

Huawei Tech Support App

Iphone

Referências · 7

• https://osv.dev/vulnerability/CVE-2017-2730 · Aviso do Fabricante
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20170310-01-hilinkapp-en · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2017-0390 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-2730 · Nota de Segurança
• https://bugs.mageia.org/show_bug.cgi?id=21901 · Nota
• https://virtualbox.org/wiki/Changelog-5.1#v30 · Nota
• https://advisories.mageia.org/MGASA-2017-0390.html · Nota de Segurança