CVE-2017-17322 : Huawei Honor Smart Scale Application with software of 1.1.1 has an information disclosure vulnerability. The application

Huawei Honor Smart Scale Application with software of 1.1.1 has an information disclosure vulnerability. The application does not sufficiently restrict the resource which can be accessed by certain protocol. An attacker could trick the user to click a malicious link, successful exploit could cause information disclosure.

Published 2018-03-09 17:29:02

Updated 2018-03-26 16:48:24

Source Huawei Technologies

View at NVD, CVE.org

Vulnerability category: Information leak

Exploit prediction scoring system (EPSS) score for CVE-2017-17322

EPSS FAQ

0.08%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 31 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-17322

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:P/I:N/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
4.3	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N	2.8	1.4	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: Low Integrity: None Availability: None

References for CVE-2017-17322

http://www.securityfocus.com/bid/103442

Huawei Honor Smart Scale Application CVE-2017-17322 Information Disclosure Vulnerability
Third Party Advisory;VDB Entry
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180309-01-ah-en

Security Advisory - Information Disclosure Vulnerability on Honor Smart Scale Application
Vendor Advisory

Products affected by CVE-2017-17322

Huawei » Honor Smart Scale Application Firmware » Version: 1.1.1
cpe:2.3:o:huawei:honor_smart_scale_application_firmware:1.1.1:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Honor Smart Scale Application » Version: N/A

Vulnerability Details : CVE-2017-17322

Exploit prediction scoring system (EPSS) score for CVE-2017-17322

CVSS scores for CVE-2017-17322

CWE ids for CVE-2017-17322

References for CVE-2017-17322

Products affected by CVE-2017-17322