CVE-2017-2704: Huawei Crowdtest

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Smarthome 1.0.2.364 and earlier versions,HiAPP 7.3.0.303 and earlier versions,HwParentControl 2.0.0 and earlier versions,HwParentControlParent 5.1.0.12 and earlier versions,Crowdtest 1.5.3 and earlier versions,HiWallet 8.0.0.301 and earlier versions,Huawei Pay 8.0.0.300 and earlier versions,Skytone 8.1.2.300 and earlier versions,HwCloudDrive(EMUI6.0) 8.0.0.307 and earlier versions,HwPhoneFinder(EMUI6.0) 9.3.0.310 and earlier versions,HwPhoneFinder(EMUI5.1) 9.2.2.303 and earlier versions,HiCinema 8.0.2.300 and earlier versions,HuaweiWear 21.0.0.360 and earlier versions,HiHealthApp 3.0.3.300 and earlier versions have an information exposure vulnerability. Encryption keys are stored in the system. The attacker can implement reverse engineering to obtain the encryption keys, causing information exposure.

Affected products

• Huawei Crowdtest: up to and including 1.5.3
• Huawei Hiapp: up to and including 7.3.0.303
• Huawei Hicinema: up to and including 8.0.2.300
• Huawei Hihealthapp: up to and including 3.0.3.300
• Huawei Hiwallet: up to and including 8.0.0.301
• Huawei Huawei Pay: up to and including 8.0.0.300
• Huawei Huaweiwear: up to and including 21.0.0.360
• Huawei hwclouddrive(emui6.0): up to and including 8.0.0.307
• Huawei Hwparentcontrol: up to and including 2.0.0
• Huawei Hwparentcontrolparent: up to and including 5.1.0.12
• Huawei hwphonefinder(emui5.1): up to and including 9.2.2.303
• Huawei hwphonefinder(emui6.0): up to and including 9.3.0.310
• Huawei Skytone: up to and including 8.1.2.300
• Huawei Smarthome: up to and including 1.0.2.364

Published 2017-11-22. Last modified 2026-06-17.