Huawei Elle-AL00B Firmware vulnerabilities

3 CVEs affecting Huawei Elle-AL00B Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-5276, published 2019-12-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-5235, published 2019-12-14. Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days. Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation…
CVE-2019-5276, published 2019-12-23. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Huawei smart phones with earlier versions than ELLE-AL00B 9.1.0.222(C00E220R2P1) have a buffer overflow vulnerability. An attacker may intercept and tamper with the packet in the local area network…
CVE-2019-5246, published 2019-11-13. Medium severity, CVSS 6.2. EPSS: 0.2% chance of exploitation in the next 30 days. Smartphones with software of ELLE-AL00B 9.1.0.109(C00E106R1P21), 9.1.0.113(C00E110R1P21), 9.1.0.125(C00E120R1P21), 9.1.0.135(C00E130R1P21), 9.1.0.153(C00E150R1P21), 9.1.0.155(C00E150R1P21),…