Huawei Honor Magic 2 Firmware vulnerabilities

3 CVEs affecting Huawei Honor Magic 2 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-9244, published 2020-08-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-5222, published 2019-07-17. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. There is an information disclosure vulnerability on Secure Input of certain Huawei smartphones in Versions earlier than Tony-AL00B 9.1.0.216(C00E214R2P1). The Secure Input does not properly limit…
CVE-2020-9244, published 2020-08-11. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions earlier than 10.1.0.270(C431E7R1P5),Versions earlier than 10.1.0.270(C635E3R1P5),Versions…
CVE-2019-5220, published 2019-07-10. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker could do a certain operation on certain step…