CVE-2017-2730

Severity: low (CVSS 3.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-11-22 · updated 2026-06-17
Weakness: CWE-200

Description

HUAWEI HiLink APP (for IOS) versions earlier before 5.0.25.306 and HUAWEI Tech Support APP (for IOS) versions earlier before 5.0.0 have an information leak vulnerability. When an iPhone with these APPs installed access the Wi-Fi hotpot built by attacker, the attacker can collect the information of iPhone mode and firmware version.

Affected products

Huawei Technologies Co., Ltd. HUAWEI HiLink APP (for IOS): before 5.0.25.306 — fixed in 5.0.25.306
Huawei Tech Support: before 5.0.0 — fixed in 5.0.0

How to fix

Upgrade to a fixed version: Huawei Technologies Co., Ltd. HUAWEI HiLink APP (for IOS) 5.0.25.306; Huawei Tech Support 5.0.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2017-2730 or the next vulnerability affects your stack