Huawei Curiem-WFG9B Firmware vulnerabilities

5 CVEs affecting Huawei Curiem-WFG9B Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-52712, published 2024-05-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-52548, published 2024-05-28. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26) Arbitrary Memory Corruption in SMI Handler of ThisiServicesSmm SMM module. This can be leveraged by a malicious OS attacker to corrupt arbitrary…
CVE-2023-52710, published 2024-05-28. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26), As the communication buffer size hasn’t been properly validated to be of the expected size, it can partially overlap with the beginning SMRAM.This…
CVE-2023-52547, published 2024-05-28. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26. Memory Corruption in SMI Handler of HddPassword SMM Module. This can be leveraged by a malicious OS attacker to corrupt data structures stored at…
CVE-2023-52712, published 2024-05-28. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Various Issues Due To Exposed SMI Handler in AmdPspP2CmboxV2. The first issue can be leveraged to bypass the protections that have been put in place by previous UEFI phases to prevent direct access…
CVE-2023-52711, published 2024-05-28. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Various Issues Due To Exposed SMI Handler in AmdPspP2CmboxV2. The first issue can be leveraged to bypass the protections that have been put in place by previous UEFI phases to prevent direct access…