Vendors / Huawei Records 2425 All Threatist records
Exploited (KEV) 4 In CISA KEV
CVSS critical 233 CVSS 9.0–10.0
CVSS high 1109 CVSS 7.0–8.9
Exploited now Huawei records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority CRITICAL 93KEV
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.72105 · Published 2019-10-11 · No fix listed CWE-416
Priority MEDIUM 40
The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation.
CVSS 3.1 HIGH 8.1· Adjacent network · No auth · No interaction · EPSS 0.02691 · Published 2019-08-14 · Partial fix CWE-310
Priority LOW 30
Some Huawei smartphones ALP-AL00B 8.0.0.118D(C00), ALP-TL00B 8.0.0.118D(C01), BLA-AL00B 8.0.0.118D(C00), BLA-L09C 8.0.0.127(C432), 8.0.0.128(C432), 8.0.0.137(C432), BLA-L29C 8.0.0.129(C432), 8.0.0.137(C432) have an authe…
CVSS 3.0 MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00276 · Published 2018-11-13 · No fix listed CWE-287
Priority LOW 26
Some Huawei smart phones have a null pointer dereference vulnerability.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00915 · Published 2019-12-13 · No fix listed CWE-476
Priority LOW 24
There are two denial of service vulnerabilities on some Huawei smartphones.
CVSS 3.1 MEDIUM 5.3· Adjacent network · No auth · No interaction · EPSS 0.00323 · Published 2020-04-27 · Fixed in 9.1.0.333(C00E333R2P1T8), 9.1.0.300(C432E4R1P9T8) +63 CWE-20
Priority LOW 24
There are two denial of service vulnerabilities on some Huawei smartphones.
CVSS 3.1 MEDIUM 5.3· Adjacent network · No auth · No interaction · EPSS 0.00323 · Published 2020-04-27 · Fixed in 9.1.0.215(C432E1R1P1T8), 9.1.0.213(C185E1R1P1T8) +63 CWE-20
Priority LOW 21
Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability.
CVSS 3.1 MEDIUM 4.6· Physical · No auth · No interaction · EPSS 0.00214 · Published 2020-06-08 · Fixed in 9.0.0.181(C00E87R2P20T8), 9.0.0.201(C432E4R1P9) +46
Priority LOW 21
Some Huawei smart phones ALP-AL00B 8.0.0.106(C00), 8.0.0.113(SP2C00), 8.0.0.113(SP3C00), 8.0.0.113(SP7C00), 8.0.0.118(C00), 8.0.0.120(SP2C00), 8.0.0.125(SP1C00), 8.0.0.125(SP3C00), 8.0.0.126(SP2C00), 8.0.0.126(SP5C00), 8…
CVSS 3.0 MEDIUM 4.6· Physical · No auth · No interaction · EPSS 0.00237 · Published 2018-10-23 · No fix listed
Priority LOW 21
RCS module in Huawei ALP-AL00B smart phones with software versions earlier than 8.0.0.129, BLA-AL00B smart phones with software versions earlier than 8.0.0.129 has a remote control vulnerability.
CVSS 3.0 MEDIUM 4.4· Local · No auth · User interaction · EPSS 0.0046 · Published 2018-04-30 · No fix listed
Open these records in search → All records by CVSS severity
Critical233 High1109 Medium979 Low104 No CVSS0