Huawei Changxiang 8 Plus Firmware vulnerabilities

2 CVEs affecting Huawei Changxiang 8 Plus Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-1837, published 2020-07-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-1837, published 2020-07-06. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. ChangXiang 8 Plus with versions earlier than 9.1.0.136(C00E121R1P6T8) have a denial of service vulnerability. The device does not properly handle certain message from base station, the attacker could…
CVE-2019-5264, published 2019-12-13. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. There is an information disclosure vulnerability in certain Huawei smartphones (Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9). The…