Huawei Alp-l09 Firmware vulnerabilities

5 CVEs affecting Huawei Alp-l09 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-19412, published 2020-06-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-7923, published 2018-09-12. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vulnerability due to lack of parameter check. An attacker tricks the user who has…
CVE-2018-7922, published 2018-09-12. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vulnerability due to lack of parameter check. An attacker tricks the user who has…
CVE-2019-5303, published 2020-04-27. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to…
CVE-2019-5302, published 2020-04-27. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to…
CVE-2019-19412, published 2020-06-08. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker login the…