CVE-2017-2730: huawei technologies co., ltd. huawei hilink app (for ios), huawei tech support app (for ios)
Vulnerability summary
CVE-2017-2730 is a low (CVSS 3.5) vulnerability in huawei technologies co., ltd. huawei hilink app (for ios), huawei tech support app (for ios). EPSS estimates a 0.33% chance of exploitation in the next 30 days, higher than 25.8% of scored vulnerabilities.
Not severe (CVSS 3.5, adjacent network); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 1Timeline
- 22-11-2017PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
HUAWEI HiLink APP (for IOS) versions earlier before 5.0.25.306 and HUAWEI Tech Support APP (for IOS) versions earlier before 5.0.0 have an information leak vulnerability. When an iPhone with these APPs installed access the Wi-Fi hotpot built by attacker, the attacker can collect the information of iPhone mode and firmware version.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.33%
Chance of exploitation in the next 30 days
Percentile
26%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.33% on 04-10-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: adjacent network, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.
Huawei2 products
- hilink< 5.0.25.306
- tech_support< 5.0.0
Huawei technologies co., ltd.1 product
- huawei hilink app (for ios), huawei tech support app (for ios)HUAWEI HiLink APP (for IOS) Versions earlier before 5.0.25.306, HUAWEI Tech Support APP (for IOS) Versions earlier before 5.0.0
2 vendors · 3 products
References
1 links- www.huawei.com/en/psirt/security-advisories/huawei-sa-20170310-01-hilinkapp-enX Refsource CONFIRMVendor Advisory