What is CVE-2017-2730?

CVE-2017-2730 is a low-severity vulnerability in Apple Iphone Os, classified under Information Disclosure. CVSS score: 3.5/10. Published 2017-11-22.

How severe is CVE-2017-2730?

Low severity. CVSS v3 base score is 3.5 out of 10.

Information disclosure in Apple Iphone Os

CVE-2017-2730

HUAWEI HiLink APP (for IOS) versions earlier before 5.0.25.306 and HUAWEI Tech Support APP (for IOS) versions earlier before 5.0.0 have an information leak vulnerability. When an iPhone with these APPs installed access the Wi-Fi hotpot built by attacker, the attacker can collect the information of iPhone mode and firmware version.

Vulnerability class: Information Disclosure

EPSS: 0.003 (25.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.5 (Low). Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N.

Affected products

Apple Iphone_os
Huawei Hilink
Huawei Tech_support
Huawei Technologies Co., Ltd. Hilink App (For Ios), Tech Support Ios) — versions HUAWEI HiLink APP (for IOS) Versions earlier before 5.0.25.306, HUAWEI Tech Support APP (for IOS) Versions earlier before 5.0.0

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-2730?: CVE-2017-2730 is a low-severity vulnerability in Apple Iphone Os, classified under Information Disclosure. CVSS score: 3.5/10. Published 2017-11-22.
How severe is CVE-2017-2730?: Low severity. CVSS v3 base score is 3.5 out of 10.