CVE-2017-2704
Estado: ModificadaAlta (7.5)—
Smarthome 1.0.2.364 and earlier versions,HiAPP 7.3.0.303 and earlier versions,HwParentControl 2.0.0 and earlier versions,HwParentControlParent 5.1.0.12 and earlier versions,Crowdtest 1.5.3 and earlier versions,HiWallet 8.0.0.301 and earlier versions,Huawei Pay 8.0.0.300 and earlier versions,Skytone 8.1.2.300 and earlier versions,HwCloudDrive(EMUI6.0) 8.0.0.307 and earlier versions,HwPhoneFinder(EMUI6.0) 9.3.0.310 and earlier versions,HwPhoneFinder(EMUI5.1) 9.2.2.303 and earlier versions,HiCinema 8.0.2.300 and earlier versions,HuaweiWear 21.0.0.360 and earlier versions,HiHealthApp 3.0.3.300 and earlier versions have an information exposure vulnerability.
Leer descripción completaMostrar menos
Encryption keys are stored in the system. The attacker can implement reverse engineering to obtain the encryption keys, causing information exposure.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.60%
- Percentil entre todas las CVEs puntuadas: 47
- Fecha de la puntuación: 4/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (14)
Huawei — CrowdtestHuawei — HiappHuawei — HicinemaHuawei — HihealthappHuawei — HiwalletHuawei — Huawei PAYHuawei — HuaweiwearHuawei — Hwclouddrive(emui6.0)Huawei — HwparentcontrolHuawei — HwparentcontrolparentHuawei — Hwphonefinder(emui5.1)Huawei — Hwphonefinder(emui6.0)Huawei — SkytoneHuawei — Smarthome
CWE
- CWE-200
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2017-2704",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "psirt@huawei.com",
"affectedData": [
{
"vendor": "Huawei Technologies Co., Ltd.",
"product": "Smarthome,HiAPP,HwParentControl,HwParentControlParent,Crowdtest,HiWallet,Huawei Pay,Skytone,HwCloudDrive(EMUI6.0),HwPhoneFinder?¡§EMUI6.0??,HwPhoneFinder?¡§EMUI5.1??,HiCinema,HuaweiWear,HiHealthApp,",
"versions": [
{
"status": "affected",
"version": "Smarthome 1.0.2.364 and earlier versions,HiAPP 7.3.0.303 and earlier versions,HwParentControl 2.0.0 and earlier versions,HwParentControlParent 5.1.0.12 and earlier versions,Crowdtest 1.5.3 and earlier versions,HiWallet 8.0.0.301 and earlier versions,Huawei Pay 8.0.0.300 and earlier versions,Skytone 8.1.2.300 and earlier versions,HwCloudDrive(EMUI6.0) 8.0.0.307 and earlier versions,HwPhoneFinder EMUI6.0 9.3.0.310 and earlier versions,HwPhoneFinder EMUI5.1 9.2.2.303 and earlier versions,HiCinema 8.0.2.300 and earlier versions,HuaweiWear 21.0.0.360 and earlier versions,HiHealthApp 3.0.3.300 and earlier versions,"
}
]
}
]
}
],
"published": "2017-11-22T19:29:00.723",
"references": [
{
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-encryption-en",
"tags": [
"Vendor Advisory"
],
"source": "psirt@huawei.com"
},
{
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-encryption-en",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Smarthome 1.0.2.364 and earlier versions,HiAPP 7.3.0.303 and earlier versions,HwParentControl 2.0.0 and earlier versions,HwParentControlParent 5.1.0.12 and earlier versions,Crowdtest 1.5.3 and earlier versions,HiWallet 8.0.0.301 and earlier versions,Huawei Pay 8.0.0.300 and earlier versions,Skytone 8.1.2.300 and earlier versions,HwCloudDrive(EMUI6.0) 8.0.0.307 and earlier versions,HwPhoneFinder(EMUI6.0) 9.3.0.310 and earlier versions,HwPhoneFinder(EMUI5.1) 9.2.2.303 and earlier versions,HiCinema 8.0.2.300 and earlier versions,HuaweiWear 21.0.0.360 and earlier versions,HiHealthApp 3.0.3.300 and earlier versions have an information exposure vulnerability. Encryption keys are stored in the system. The attacker can implement reverse engineering to obtain the encryption keys, causing information exposure."
},
{
"lang": "es",
"value": "Smarthome 1.0.2.364 y versiones anteriores, HiAPP 7.3.0.303 y anteriores, HwParentControl 2.0.0 y anteriores, HwParentControlParent 5.1.0.12 y anteriores, Crowdtest 1.5.3 y anteriores, HiWallet 8.0.0.301 y anteriores, Huawei Pay 8.0.0.300 y anteriores, Skytone 8.1.2.300 y anteriores, HwCloudDrive(EMUI6.0) 8.0.0.307 y anteriores, HwPhoneFinder(EMUI6.0) 9.3.0.310 y anteriores, HwPhoneFinder(EMUI5.1) 9.2.2.303 y anteriores, HiCinema 8.0.2.300 y anteriores, HuaweiWear 21.0.0.360 y anteriores y HiHealthApp 3.0.3.300 y anteriores tienen una vulnerabilidad de divulgación de información. Las claves de cifrado están almacenadas en el sistema. El atacante puede utilizar ingeniería inversa para obtener las claves de cifrado, provocando una divulgación de información."
}
],
"lastModified": "2026-06-17T01:16:42.403",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:huawei:smarthome:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FEF1E07C-5A28-4A01-B739-23EF517C6E11",
"versionEndIncluding": "1.0.2.364"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:huawei:hiapp:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1036F83E-18BA-4560-B796-878F05D976F2",
"versionEndIncluding": "7.3.0.303"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:huawei:hwparentcontrol:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD364E0F-4CF9-481D-AAD1-696BEEF8CA9D",
"versionEndIncluding": "2.0.0"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:huawei:hwparentcontrolparent:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "69572083-6CA3-4FCD-A8F7-460F184BE9A0",
"versionEndIncluding": "5.1.0.12"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:huawei:crowdtest:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD498317-5E9B-4605-A41C-AF411A3F0436",
"versionEndIncluding": "1.5.3"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:huawei:hiwallet:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D7ACF69D-3555-4989-A237-EA3F06575E04",
"versionEndIncluding": "8.0.0.301"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:huawei:huawei_pay:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "643D1BE6-9017-4DFE-A733-9772E06BAB5B",
"versionEndIncluding": "8.0.0.300"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:huawei:skytone:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8FC601A7-493E-4AE4-B26D-21B09CC31D3E",
"versionEndIncluding": "8.1.2.300"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:hwclouddrive\\(emui6.0\\):*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6416700B-4AC4-40E1-AA67-070055AC810B",
"versionEndIncluding": "8.0.0.307"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:huawei:hwphonefinder\\(emui6.0\\):*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "53B56850-D4CE-4679-B894-3F9F8237125A",
"versionEndIncluding": "9.3.0.310"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:huawei:hwphonefinder\\(emui5.1\\):*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4F537415-D418-48AE-ACFB-CD6F41073492",
"versionEndIncluding": "9.2.2.303"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:huawei:hicinema:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "279C86EF-784F-4B46-8E72-5DAFD02C1030",
"versionEndIncluding": "8.0.2.300"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:huawei:huaweiwear:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "01416564-940A-4842-ADAC-0CA9F53890DB",
"versionEndIncluding": "21.0.0.360"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:huawei:hihealthapp:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "090BA6B7-A16E-4B26-A720-B70D95675369",
"versionEndIncluding": "3.0.3.300"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@huawei.com"
}