CVE-2017-2730

LOW 3.5CVE-2017-2730 · Published 22/11/2017 · updated 17/06/2026

In short

CVE-2017-2730 is a LOW (CVSS 3.5) vulnerability affecting hilink (huawei), tech support (huawei).
Chance of exploitation in the next 30 days (EPSS): 0.33%, higher than 25.8% of all vulnerabilities.
Fix: update to 5.0.25.306, 5.0.0 or later.

Package	Affected versions	Patched versions
hilink huawei	`< 5.0.25.306`	`5.0.25.306`
tech support huawei	`< 5.0.0`	`5.0.0`

Description

HUAWEI HiLink APP (for IOS) versions earlier before 5.0.25.306 and HUAWEI Tech Support APP (for IOS) versions earlier before 5.0.0 have an information leak vulnerability. When an iPhone with these APPs installed access the Wi-Fi hotpot built by attacker, the attacker can collect the information of iPhone mode and firmware version.

References

huawei.com/en/psirt/security-advisories/huawei-sa-20170310-01-hilinkapp-en · Vendor Advisory

More vulnerabilities in hilink

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free