CVE-2017-17322

Huawei Honor Smart Scale Application with software of 1.1.1 has an information disclosure vulnerability. The application does not sufficiently restrict the resource which can be accessed by certain protocol. An attacker could trick the user to click a malicious link, successful exploit could cause information disclosure.

Score

CVSS 3.0 4.3 Medium

Status

Modified - psirt@huawei.com

Published

2018-03-09

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Honor Smart Scale Application Firmware (Huawei)
• Honor Smart Scale Application (Huawei Technologies Co. Ltd.)

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180309-01-ah-en
• http://www.securityfocus.com/bid/103442