What is CVE-2017-2723?

CVE-2017-2723 is a medium-severity vulnerability in Huawei Files, classified under Cleartext Storage of Sensitive Information. CVSS score: 6.7/10. Published 2017-11-22.

How severe is CVE-2017-2723?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Vulnerability in Huawei Files

CVE-2017-2723

The Files APP 7.1.1.308 and earlier versions in some Huawei mobile phones has a vulnerability of plaintext storage of users' Safe passwords. An attacker with the root privilege of an Android system could forge the Safe to read users' plaintext Safe passwords, leading to information leak.

EPSS: 0.002 (7.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Huawei Files
Huawei Technologies Co., Ltd. Files — versions 7.1.1.308 and earlier versions

Weakness classification (CWE)

CWE-312 — Cleartext Storage of Sensitive Information

References

psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-2723?: CVE-2017-2723 is a medium-severity vulnerability in Huawei Files, classified under Cleartext Storage of Sensitive Information. CVSS score: 6.7/10. Published 2017-11-22.
How severe is CVE-2017-2723?: Medium severity. CVSS v3 base score is 6.7 out of 10.