Huawei Lon-AL00B Firmware vulnerabilities

2 CVEs affecting Huawei Lon-AL00B Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-17280, published 2018-03-09.

More from Huawei.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-17285, published 2018-02-15. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Bluetooth module in some Huawei mobile phones with software LON-AL00BC00B229 and earlier versions has a buffer overflow vulnerability. Due to insufficient input validation, an unauthenticated…
• CVE-2017-17280, published 2018-03-09. Low severity, CVSS 3.5. EPSS: 0.3% chance of exploitation in the next 30 days. NFC (Near Field Communication) module in Huawei mobile phones with software LON-AL00BC00 has an information leak vulnerability. The attacker has to trick a user to do some specific operations and…