CVE-2017-2732

Huawei Hilink APP Versions earlier before 5.0.25.306 has an information leak vulnerability. An attacker may trick a user into installing a malicious application and application can access Hilink APP data...

Information disclosure

Huawei Hilink APP Versions earlier before 5.0.25.306 has an information leak vulnerability. An attacker may trick a user into installing a malicious application and application can access Hilink APP data...

CVE-2017-2732

Huawei Hilink APP is affected by an information leak in versions earlier than 5.0.25.306. An attacker could entice a user to install a malicious app, enabling access to Hilink APP data. The vulnerability is described across multiple sources (NVD entry and Huawei advisory). The advisory notes that...

CVE-2017-2732

Huawei Hilink APP Versions earlier before 5.0.25.306 has an information leak vulnerability. An attacker may trick a user into installing a malicious application and application can access Hilink APP data...

CVE-2017-2730

CVE-2017-2730 affects Huawei HiLink (iOS) and Huawei Tech Support (iOS) apps prior to 5.0.25.306 and 5.0.0, respectively. The issue is an information-leak vulnerability where, when an iPhone running these apps connects to a Wi‑Fi hotspot set up by an attacker, the attacker can collect the phone’s...

Huawei Hilink APP for IOS Information Disclosure Vulnerability

Huawei Hilink APP for IOS is a set of unified management platform applications for network-connected terminals based on the IOS platform from Huawei, China. An information disclosure vulnerability exists in Huawei Hilink APP for IOS versions prior to 5.0.25.306. The vulnerability can be exploited...

Security Advisory - Information Leak Vulnerability in Huawei Hilink APP

Huawei Hilink APP has an information leak vulnerability. An attacker may trick a user into installing a malicious application and application can access Hilink APP data. Vulnerability ID: HWPSIRT-2017-01092 This vulnerability has been assigned a Common Vulnerabilities and Exposures CVE ID:...

Huawei Hilink APP suffers from information leakage vulnerability

Huawei HiLink APP is a unified management platform for Huawei's network-connected terminals, supporting Mobile WiFi E5, Huawei routers, Honor Cube, Huawei Home Gateway, etc. It can discover and manage all Huawei "HiLink" terminal devices. Huawei Hilink APP is vulnerable to information leakage. Wh...

CVE-2016-4005

The Huawei Hilink App application before 3.19.2 for Android does not validate SSL certificates, which allows local users to have unspecified impact via unknown vectors, aka HWPSIRT-2016-03008...

CVE-2016-4005

The Huawei Hilink App application before 3.19.2 for Android does not validate SSL certificates, which allows local users to have unspecified impact via unknown vectors, aka HWPSIRT-2016-03008...

Design/Logic Flaw

The Huawei Hilink App application before 3.19.2 for Android does not validate SSL certificates, which allows local users to have unspecified impact via unknown vectors, aka HWPSIRT-2016-03008...

CVE-2016-4005

The Huawei Hilink App application before 3.19.2 for Android does not validate SSL certificates, which allows local users to have unspecified impact via unknown vectors, aka HWPSIRT-2016-03008...

CVE-2016-4005

CVE-2016-4005 concerns the Huawei Hilink App for Android prior to 3.19.2, which does not validate SSL certificates. This creates a local-authenticated exposure with unspecified impact via unknown vectors, per HWPSIRT-2016-03008. Public references note the same issue affecting Huawei Wear App and ...

Huawei WearAPP and HiLink Design Flaw Vulnerability

Huawei WearAPP and HiLink are both products of the Chinese company Huawei Huawei. The former is a set of APPs for use with smart wearable devices, and the latter is a unified management platform for Huawei network-connected terminals. A design flaw vulnerability exists in Huawei WearAPP versions...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Huawei HiLink E3276 and E3236 TCPU before V200R002B470D13SP00C00 and WebUI before V100R007B100D03SP01C03, E5180s-22 before 21.270.21.00.00, and E586Bs-2 before 21.322.10.00.889 allow remote attackers to hijack the authentication of users...

CVE-2014-5395

Multiple cross-site request forgery CSRF vulnerabilities in Huawei HiLink E3276 and E3236 TCPU before V200R002B470D13SP00C00 and WebUI before V100R007B100D03SP01C03, E5180s-22 before 21.270.21.00.00, and E586Bs-2 before 21.322.10.00.889 allow remote attackers to hijack the authentication of users...

CVE-2014-5395

Multiple cross-site request forgery CSRF vulnerabilities in Huawei HiLink E3276 and E3236 TCPU before V200R002B470D13SP00C00 and WebUI before V100R007B100D03SP01C03, E5180s-22 before 21.270.21.00.00, and E586Bs-2 before 21.322.10.00.889 allow remote attackers to hijack the authentication of users...

CVE-2014-5395

CVE-2014-5395 describes CSRF vulnerabilities in Huawei HiLink devices: HiLink E3276 and E3236 TCPU (before V200R002B470D13SP00C00) and WebUI (before V100R007B100D03SP01C03), E5180s-22 (before 21.270.21.00.00), and E586Bs-2 (before 21.322.10.00.889). The underlying issue is cross-site request forg...

CVE-2014-8331

Multiple cross-site request forgery CSRF vulnerabilities in Huawei HiLink E3236 before E3276sTCPU-V200R002B470D13SP00C00 and E3276sWebUI-V100R007B100D03SP01C03 and E3276 before E3236sTCPU-V200R002B146D41SP00C00 and E3236sWebUI-V100R007B100D03SP01C03 allow remote attackers to hijack the...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Huawei HiLink E3236 before E3276sTCPU-V200R002B470D13SP00C00 and E3276sWebUI-V100R007B100D03SP01C03 and E3276 before E3236sTCPU-V200R002B146D41SP00C00 and E3236sWebUI-V100R007B100D03SP01C03 allow remote attackers to hijack the...