VAR-201711-0220
Vulnerability from variot - Updated: 2025-04-20 23:24Smarthome 1.0.2.364 and earlier versions,HiAPP 7.3.0.303 and earlier versions,HwParentControl 2.0.0 and earlier versions,HwParentControlParent 5.1.0.12 and earlier versions,Crowdtest 1.5.3 and earlier versions,HiWallet 8.0.0.301 and earlier versions,Huawei Pay 8.0.0.300 and earlier versions,Skytone 8.1.2.300 and earlier versions,HwCloudDrive(EMUI6.0) 8.0.0.307 and earlier versions,HwPhoneFinder(EMUI6.0) 9.3.0.310 and earlier versions,HwPhoneFinder(EMUI5.1) 9.2.2.303 and earlier versions,HiCinema 8.0.2.300 and earlier versions,HuaweiWear 21.0.0.360 and earlier versions,HiHealthApp 3.0.3.300 and earlier versions have an information exposure vulnerability. Encryption keys are stored in the system. The attacker can implement reverse engineering to obtain the encryption keys, causing information exposure. plural Huawei The product contains an information disclosure vulnerability.Information may be obtained. Huawei Smarthome, etc. are all products of China's Huawei (Huawei). Huawei Smarthome is a smart home management app. HiAPP is a dedicated technical knowledge consultant platform for Huawei mobile phones. Several Huawei products have an information disclosure vulnerability, which stems from the fact that the program stores encryption keys in the affected product software
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201711-0220",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "skytone",
"scope": "lte",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.2.300"
},
{
"model": "hiapp",
"scope": "lte",
"trust": 1.0,
"vendor": "huawei",
"version": "7.3.0.303"
},
{
"model": "crowdtest",
"scope": "lte",
"trust": 1.0,
"vendor": "huawei",
"version": "1.5.3"
},
{
"model": "hiwallet",
"scope": "lte",
"trust": 1.0,
"vendor": "huawei",
"version": "8.0.0.301"
},
{
"model": "hwphonefinder\\",
"scope": "lte",
"trust": 1.0,
"vendor": "huawei",
"version": "9.3.0.310"
},
{
"model": "hwphonefinder\\",
"scope": "lte",
"trust": 1.0,
"vendor": "huawei",
"version": "9.2.2.303"
},
{
"model": "smarthome",
"scope": "lte",
"trust": 1.0,
"vendor": "huawei",
"version": "1.0.2.364"
},
{
"model": "hwparentcontrolparent",
"scope": "lte",
"trust": 1.0,
"vendor": "huawei",
"version": "5.1.0.12"
},
{
"model": "hicinema",
"scope": "lte",
"trust": 1.0,
"vendor": "huawei",
"version": "8.0.2.300"
},
{
"model": "hwclouddrive\\",
"scope": "lte",
"trust": 1.0,
"vendor": "huawei",
"version": "8.0.0.307"
},
{
"model": "hwparentcontrol",
"scope": "lte",
"trust": 1.0,
"vendor": "huawei",
"version": "2.0.0"
},
{
"model": "huaweiwear",
"scope": "lte",
"trust": 1.0,
"vendor": "huawei",
"version": "21.0.0.360"
},
{
"model": "hihealthapp",
"scope": "lte",
"trust": 1.0,
"vendor": "huawei",
"version": "3.0.3.300"
},
{
"model": "pay",
"scope": "lte",
"trust": 1.0,
"vendor": "huawei",
"version": "8.0.0.300"
},
{
"model": "crowdtest",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "hiapp",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "hicinema",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "hihealthapp",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "hiwallet",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "pay",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "huaweiwear",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "hwclouddrive",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "hwparentcontrol",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "hwparentcontrolparent",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "hwphonefinder",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "skytone",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "smarthome",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-010794"
},
{
"db": "NVD",
"id": "CVE-2017-2704"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:huawei:crowdtest",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:hiapp",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:hicinema",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:hihealthapp",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:huawei:hiwallet",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:huawei_pay",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:huaweiwear",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:hwclouddrive_emui6.0",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:hwparentcontrol",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:hwparentcontrolparent",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:hwphonefinder_emui5.1",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:huawei:skytone",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:smarthome",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-010794"
}
]
},
"cve": "CVE-2017-2704",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2017-2704",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.9,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "VHN-110907",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2017-2704",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 7.5,
"baseSeverity": "High",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "CVE-2017-2704",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2017-2704",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2017-2704",
"trust": 0.8,
"value": "High"
},
{
"author": "CNNVD",
"id": "CNNVD-201711-1013",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULHUB",
"id": "VHN-110907",
"trust": 0.1,
"value": "MEDIUM"
},
{
"author": "VULMON",
"id": "CVE-2017-2704",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-110907"
},
{
"db": "VULMON",
"id": "CVE-2017-2704"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-010794"
},
{
"db": "CNNVD",
"id": "CNNVD-201711-1013"
},
{
"db": "NVD",
"id": "CVE-2017-2704"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Smarthome 1.0.2.364 and earlier versions,HiAPP 7.3.0.303 and earlier versions,HwParentControl 2.0.0 and earlier versions,HwParentControlParent 5.1.0.12 and earlier versions,Crowdtest 1.5.3 and earlier versions,HiWallet 8.0.0.301 and earlier versions,Huawei Pay 8.0.0.300 and earlier versions,Skytone 8.1.2.300 and earlier versions,HwCloudDrive(EMUI6.0) 8.0.0.307 and earlier versions,HwPhoneFinder(EMUI6.0) 9.3.0.310 and earlier versions,HwPhoneFinder(EMUI5.1) 9.2.2.303 and earlier versions,HiCinema 8.0.2.300 and earlier versions,HuaweiWear 21.0.0.360 and earlier versions,HiHealthApp 3.0.3.300 and earlier versions have an information exposure vulnerability. Encryption keys are stored in the system. The attacker can implement reverse engineering to obtain the encryption keys, causing information exposure. plural Huawei The product contains an information disclosure vulnerability.Information may be obtained. Huawei Smarthome, etc. are all products of China\u0027s Huawei (Huawei). Huawei Smarthome is a smart home management app. HiAPP is a dedicated technical knowledge consultant platform for Huawei mobile phones. Several Huawei products have an information disclosure vulnerability, which stems from the fact that the program stores encryption keys in the affected product software",
"sources": [
{
"db": "NVD",
"id": "CVE-2017-2704"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-010794"
},
{
"db": "VULHUB",
"id": "VHN-110907"
},
{
"db": "VULMON",
"id": "CVE-2017-2704"
}
],
"trust": 1.8
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2017-2704",
"trust": 2.6
},
{
"db": "JVNDB",
"id": "JVNDB-2017-010794",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201711-1013",
"trust": 0.7
},
{
"db": "VULHUB",
"id": "VHN-110907",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2017-2704",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-110907"
},
{
"db": "VULMON",
"id": "CVE-2017-2704"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-010794"
},
{
"db": "CNNVD",
"id": "CNNVD-201711-1013"
},
{
"db": "NVD",
"id": "CVE-2017-2704"
}
]
},
"id": "VAR-201711-0220",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-110907"
}
],
"trust": 0.33809524
},
"last_update_date": "2025-04-20T23:24:51.255000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "huawei-sa-20170920-01-encryption",
"trust": 0.8,
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-encryption-en"
},
{
"title": "Multiple Huawei Product information disclosure vulnerability repair measures",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=76723"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-010794"
},
{
"db": "CNNVD",
"id": "CNNVD-201711-1013"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-200",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-110907"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-010794"
},
{
"db": "NVD",
"id": "CVE-2017-2704"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.8,
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-encryption-en"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-2704"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-2704"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/200.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-110907"
},
{
"db": "VULMON",
"id": "CVE-2017-2704"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-010794"
},
{
"db": "CNNVD",
"id": "CNNVD-201711-1013"
},
{
"db": "NVD",
"id": "CVE-2017-2704"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-110907"
},
{
"db": "VULMON",
"id": "CVE-2017-2704"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-010794"
},
{
"db": "CNNVD",
"id": "CNNVD-201711-1013"
},
{
"db": "NVD",
"id": "CVE-2017-2704"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-11-22T00:00:00",
"db": "VULHUB",
"id": "VHN-110907"
},
{
"date": "2017-11-22T00:00:00",
"db": "VULMON",
"id": "CVE-2017-2704"
},
{
"date": "2017-12-25T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-010794"
},
{
"date": "2017-11-24T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201711-1013"
},
{
"date": "2017-11-22T19:29:00.723000",
"db": "NVD",
"id": "CVE-2017-2704"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-04-02T00:00:00",
"db": "VULHUB",
"id": "VHN-110907"
},
{
"date": "2020-04-02T00:00:00",
"db": "VULMON",
"id": "CVE-2017-2704"
},
{
"date": "2017-12-25T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-010794"
},
{
"date": "2020-04-03T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201711-1013"
},
{
"date": "2025-04-20T01:37:25.860000",
"db": "NVD",
"id": "CVE-2017-2704"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201711-1013"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural Huawei Information disclosure vulnerability in products",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-010794"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "information disclosure",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201711-1013"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…