CVE-2017-2704

Description

Smarthome 1.0.2.364 and earlier versions,HiAPP 7.3.0.303 and earlier versions,HwParentControl 2.0.0 and earlier versions,HwParentControlParent 5.1.0.12 and earlier versions,Crowdtest 1.5.3 and earlier versions,HiWallet 8.0.0.301 and earlier versions,Huawei Pay 8.0.0.300 and earlier versions,Skytone 8.1.2.300 and earlier versions,HwCloudDrive(EMUI6.0) 8.0.0.307 and earlier versions,HwPhoneFinder(EMUI6.0) 9.3.0.310 and earlier versions,HwPhoneFinder(EMUI5.1) 9.2.2.303 and earlier versions,HiCinema 8.0.2.300 and earlier versions,HuaweiWear 21.0.0.360 and earlier versions,HiHealthApp 3.0.3.300 and earlier versions have an information exposure vulnerability. Encryption keys are stored in the system. The attacker can implement reverse engineering to obtain the encryption keys, causing information exposure.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
0.077

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2017-17149 ,CVE-2017-2704 are affected in hiwallet 8.0.0.301NCM
Vulnerabilities CVE-2017-2704 are affected in crowdtest 1.5.3NCM
Vulnerabilities CVE-2017-2704 are affected in hiapp 7.3.0.303NCM
Vulnerabilities CVE-2017-2704 are affected in hicinema 8.0.2.300NCM
Vulnerabilities CVE-2017-2704 are affected in hihealthapp 3.0.3.300NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 21.0.0.360NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 21.0.0.353NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 21.0.0.339NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 21.0.0.331NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 21.0.0.323NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 21.0.0.321NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 21.0.0.317NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 21.0.0.310NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 21.0.0.305NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 21.0.0.302NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 20.0.10.301NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 20.0.5.301NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 20.0.3.311_gNCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 20.0.3.309_gNCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 15.0.2.305_overseasNCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 15.0.2.305NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 15.0.1.318.9NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 15.0.1.318.8NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 15.0.1.318.7NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 15.0.1.318.4NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 15.0.1.318NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 15.0.1.307NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 15.0.1.303NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 12.13.02.01.00NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 12.12.06_NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 12.11.09.00.00NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 12.11.05.00.00NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 12.09.16.00.00NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 12.04.04.03.00NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 12.03.02.04.00NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 12.02.04.02.00NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 11.12.19.00.00NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 11.12.17.00.00NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 11.08.11.00.00NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 11.08.09.00.00NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 11.08.07.00.00NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 11.08.05.00.00NCM
Vulnerabilities CVE-2017-2704 are affected in huaweiwear 11.06.09.03.00NCM
Vulnerabilities CVE-2017-2704 are affected in huawei_pay 8.0.0.300NCM
Vulnerabilities CVE-2017-2704 are affected in hwclouddrive(emui6.0) 8.0.0.307NCM
Vulnerabilities CVE-2017-2704 are affected in hwparentcontrol 2.0.0NCM
Vulnerabilities CVE-2017-2704 are affected in hwparentcontrolparent 5.1.0.12NCM
Vulnerabilities CVE-2017-2704 are affected in hwphonefinder(emui5.1) 9.2.2.303NCM
Vulnerabilities CVE-2017-2704 are affected in hwphonefinder(emui6.0) 9.3.0.310NCM
Vulnerabilities CVE-2017-2704 are affected in skytone 8.1.2.300NCM
Vulnerabilities CVE-2017-2704 are affected in smarthome 1.0.2.364NCM
Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-2704)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234