Huawei Honor 9 Lite Firmware vulnerabilities

4 CVEs affecting Huawei Honor 9 Lite Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-5252, published 2019-12-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-5251, published 2019-12-13. Medium severity, CVSS 5.5. EPSS: 0.8% chance of exploitation in the next 30 days. There is a path traversal vulnerability in several Huawei smartphones. The system does not sufficiently validate certain pathnames from the application. An attacker could trick the user into…
CVE-2018-7946, published 2018-11-27. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. There is an information leak vulnerability in some Huawei smartphones. An attacker may do some specific configuration in the smartphone and trick a user into inputting some sensitive information. Due…
CVE-2019-5264, published 2019-12-13. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. There is an information disclosure vulnerability in certain Huawei smartphones (Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9). The…
CVE-2019-5252, published 2019-12-14. Low severity, CVSS 3.5. EPSS: 0.2% chance of exploitation in the next 30 days. There is an improper authentication vulnerability in Huawei smartphones (Y9, Honor 8X, Honor 9 Lite, Honor 9i, Y6 Pro). The applock does not perform a sufficient authentication in a rare condition.…