Huawei Honor 7 Firmware vulnerabilities

4 CVEs affecting Huawei Honor 7 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-2699, published 2017-11-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-2693, published 2017-11-22. High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days. ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier versions,ALE-L21C432B214 and earlier versions,ALE-L21C464B150…
CVE-2017-2692, published 2017-11-22. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. The Keyguard application in ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier versions,ALE-L21C432B214 and…
CVE-2017-2699, published 2017-11-22. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. The Huawei Themes APP in versions earlier than PLK-UL00C17B385, versions earlier than CRR-L09C432B380, versions earlier than LYO-L21C577B128 has a privilege elevation vulnerability. An attacker could…
CVE-2016-8768, published 2017-04-02. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. Huawei Honor 6, Honor 6 Plus, Honor 7 phones with software versions earlier than 6.9.16 could allow attackers to disable the PXN defense mechanism by invoking related drive code to crash the system…