PT-2017-15519 · Huawei · Huawei Hilink App

Abid Khan · Published 2017-11-22 · Updated 2017-12-07 · CVE-2017-2732

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei Hilink APP versions prior to 5.0.25.306

Description The issue is related to an information leak. An attacker can trick a user into installing a malicious application, which can then access Huawei Hilink APP data.

Recommendations For versions prior to 5.0.25.306, update to version 5.0.25.306 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-2732

Affected Products

Huawei Hilink App

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-2732 · Security Note
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-hilinkapp-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-2732 · Vendor Advisory