CVE-2017-2704 Smarthome 1.0.2.364 and earlier versions,HiAPP 7.3.0.303 and earlier versions,HwParentControl 2.0.0 and earlier versions,HwParentControlParent 5.1.0.12 and earlier versions,Crowdtest 1.5.3 and earlier...
- Published
- Updated
- Exploit status
- No public exploit known
Description
Smarthome 1.0.2.364 and earlier versions,HiAPP 7.3.0.303 and earlier versions,HwParentControl 2.0.0 and earlier versions,HwParentControlParent 5.1.0.12 and earlier versions,Crowdtest 1.5.3 and earlier versions,HiWallet 8.0.0.301 and earlier versions,Huawei Pay 8.0.0.300 and earlier versions,Skytone 8.1.2.300 and earlier versions,HwCloudDrive(EMUI6.0) 8.0.0.307 and earlier versions,HwPhoneFinder(EMUI6.0) 9.3.0.310 and earlier versions,HwPhoneFinder(EMUI5.1) 9.2.2.303 and earlier versions,HiCinema 8.0.2.300 and earlier versions,HuaweiWear 21.0.0.360 and earlier versions,HiHealthApp 3.0.3.300 and earlier versions have an information exposure vulnerability. Encryption keys are stored in the system. The attacker can implement reverse engineering to obtain the encryption keys, causing information exposure.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Huawei smarthome | <= 1.0.2.364 | No fix listed |
| Huawei hiapp | <= 7.3.0.303 | No fix listed |
| Huawei hwparentcontrol | <= 2.0.0 | No fix listed |
| Huawei hwparentcontrolparent | <= 5.1.0.12 | No fix listed |
| Huawei crowdtest | <= 1.5.3 | No fix listed |
| Huawei hiwallet | <= 8.0.0.301 | No fix listed |
| huawei pay | <= 8.0.0.300 | No fix listed |
| Huawei skytone | <= 8.1.2.300 | No fix listed |
| Huawei hwclouddriveemui6.0 | <= 8.0.0.307 | No fix listed |
| Huawei hwphonefinderemui6.0 | <= 9.3.0.310 | No fix listed |
| Huawei hwphonefinderemui5.1 | <= 9.2.2.303 | No fix listed |
| Huawei hicinema | <= 8.0.2.300 | No fix listed |
| huaweiwear | <= 21.0.0.360 | No fix listed |
| Huawei hihealthapp | <= 3.0.3.300 | No fix listed |
| Huawei Technologies Co., Ltd. Smarthome,HiAPP,HwParentControl,HwParentControlParent,Crowdtest,HiWallet,Huawei Pay,Skytone,HwCloudDrive(EMUI6.0),HwPhoneFinder?¡§EMUI6.0??,HwPhoneFinder?¡§EMUI5.1??,HiCinema,HuaweiWear,HiHealthApp, | = Smarthome 1.0.2.364 and earlier versions,HiAPP 7.3.0.303 and earlier versions,HwParentControl 2.0.0 and earlier versions,HwParentControlParent 5.1.0.12 and earlier versions,Crowdtest 1.5.3 an | No fix listed |
References
- www.huawei.com vendor-advisory