Huawei Emily-AL00A Firmware vulnerabilities

7 CVEs affecting Huawei Emily-AL00A Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-5235, published 2019-12-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-5235, published 2019-12-14. Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days. Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation…
CVE-2018-7961, published 2018-11-27. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. There is a smart SMS verification code vulnerability in some Huawei smart phones. An attacker should trick a user to access malicious Website or malicious App and register. Due to incorrect…
CVE-2019-5282, published 2019-11-13. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. Bastet module of some Huawei smartphones with Versions earlier than Emily-AL00A 9.0.0.182(C00E82R1P21), Versions earlier than Emily-TL00B 9.0.0.182(C01E82R1P21), Versions earlier than Emily-L09C…
CVE-2018-7944, published 2018-07-05. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. Huawei smart phones Emily-AL00A with software 8.1.0.106(SP2C00) and 8.1.0.107(SP5C00) have a Factory Reset Protection (FRP) bypass vulnerability. An attacker gets some user's smart phone and performs…
CVE-2018-7925, published 2018-11-13. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. The radio module of some Huawei smartphones Emily-AL00A The versions before 8.1.0.171(C00) have a lock-screen bypass vulnerability. An unauthenticated attacker could start third-part input method APP…
CVE-2018-7911, published 2018-10-23. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. Some Huawei smart phones ALP-AL00B 8.0.0.106(C00), 8.0.0.113(SP2C00), 8.0.0.113(SP3C00), 8.0.0.113(SP7C00), 8.0.0.118(C00), 8.0.0.120(SP2C00), 8.0.0.125(SP1C00), 8.0.0.125(SP3C00), 8.0.0.126(SP2C00),…
CVE-2018-7947, published 2018-07-31. Low severity, CVSS 3.9. EPSS: 0.2% chance of exploitation in the next 30 days. Huawei mobile phones with versions earlier before Emily-AL00A 8.1.0.153(C00) have an authentication bypass vulnerability. An attacker could trick the user to connect to a malicious device. In the…