CVE-2017-2730: Infoleak
HUAWEI HiLink APP (for IOS) versions earlier before 5.0.25.306 and HUAWEI Tech Support APP (for IOS) versions earlier before 5.0.0 have an information leak vulnerability. When an iPhone with these APPs installed access the Wi-Fi hotpot built by attacker, the attacker can collect the information of iPhone mode and firmware version.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-2730?
CVE-2017-2730 is classified as a medium severity vulnerability due to its potential for information leakage.
How do I fix CVE-2017-2730?
To fix CVE-2017-2730, update the HUAWEI HiLink APP to version 5.0.25.306 or later and the HUAWEI Tech Support APP to version 5.0.0 or later.
What kind of information is leaked in CVE-2017-2730?
CVE-2017-2730 can lead to the exposure of sensitive information when the affected apps connect to malicious Wi-Fi hotspots.
Which versions of the HUAWEI HiLink APP are affected by CVE-2017-2730?
Versions of the HUAWEI HiLink APP prior to 5.0.25.306 are affected by CVE-2017-2730.
Is the Apple iPhone OS vulnerable to CVE-2017-2730?
No, the Apple iPhone OS itself is not vulnerable; it is the HUAWEI apps running on it that contain the vulnerability.