CVE-2017-17322 Information disclosure in Honor Smart Scale Application
An attacker can trick a user into clicking a malicious link to disclose sensitive information via the Huawei Honor Smart Scale application.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2017-17322?
CVE-2017-17322 is a medium-severity vulnerability in Huawei Technologies Co., Ltd. Honor Smart Scale Application, published on 9 Mar 2018. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Huawei Honor Smart Scale Application with software of 1.1.1 has an information disclosure vulnerability. The application does not sufficiently restrict the resource which can be accessed by certain protocol. An attacker could trick the user to click a malicious link, successful exploit could cause information disclosure.
Weakness: CWE-200
Which versions are affected by CVE-2017-17322?
It affects 1 product.
Products include Huawei Honor Smart Scale Application Firmware.
How do I fix CVE-2017-17322?
No fix has been published for CVE-2017-17322 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-17322 being exploited?
There is no known exploitation of CVE-2017-17322 in the wild and no public exploit code.
Sources
Also known as GHSA-7jwr-76gq-7939.