Huawei e6878-370 Firmware vulnerabilities

5 CVEs affecting Huawei e6878-370 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-9111, published 2020-10-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-1832, published 2020-05-29. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. E6878-370 products with versions of 10.0.3.1(H557SP27C233) and 10.0.3.1(H563SP1C00) have a stack buffer overflow vulnerability. The program copies an input buffer to an output buffer without…
CVE-2020-9241, published 2020-08-17. High severity, CVSS 7.0. EPSS: 0.5% chance of exploitation in the next 30 days. Huawei 5G Mobile WiFi E6878-370 with versions of 10.0.3.1(H563SP1C00),10.0.3.1(H563SP21C233) have an improper authorization vulnerability. The device does not restrict certain data received from WAN…
CVE-2020-1799, published 2020-05-21. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. E6878-370 with versions of 10.0.3.1(H557SP27C233), 10.0.3.1(H563SP1C00), 10.0.3.1(H563SP1C233) has a use after free vulnerability. The software references memory after it has been freed in certain…
CVE-2020-9069, published 2020-05-21. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak…
CVE-2020-9111, published 2020-10-19. Medium severity, CVSS 4.5. EPSS: 0.3% chance of exploitation in the next 30 days. E6878-370 versions 10.0.3.1(H557SP27C233),10.0.3.1(H563SP21C233) and E6878-870 versions 10.0.3.1(H557SP27C233),10.0.3.1(H563SP11C233) have a denial of service vulnerability. The system does not…