Huawei Honor v9 Play Firmware vulnerabilities

3 CVEs affecting Huawei Honor v9 Play Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-17145, published 2018-03-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-14491, published 2017-10-04. Critical severity, CVSS 9.8. EPSS: 84.9% chance of exploitation in the next 30 days. Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.
CVE-2017-15351, published 2018-02-15. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. The 'Find Phone' function in Huawei Honor V9 play smart phones with versions earlier than Jimmy-AL00AC00B135 has an authentication bypass vulnerability. Due to improper authentication realization in…
CVE-2017-17145, published 2018-03-09. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. Huawei Honor V9 Play smart phones with the versions before Jimmy-AL00AC00B135 have an authentication bypass vulnerability due to the improper design of a component. An attacker who get a user's smart…