Huawei Hilink App vulnerabilities

2 CVEs affecting Huawei Hilink App, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-4005, published 2016-06-13.

More from Huawei.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-4005, published 2016-06-13. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. The Huawei Hilink App application before 3.19.2 for Android does not validate SSL certificates, which allows local users to have unspecified impact via unknown vectors, aka HWPSIRT-2016-03008.
• CVE-2016-3677, published 2016-06-13. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. The Huawei Wear App application before 15.0.0.307 for Android does not validate SSL certificates, which allows local users to have unspecified impact via unknown vectors, aka HWPSIRT-2016-03008.