Huawei Mate 10 Pro Firmware vulnerabilities

7 CVEs affecting Huawei Mate 10 Pro Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-1785, published 2020-01-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-15311, published 2017-12-22. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. The baseband modules of Mate 10, Mate 10 Pro, Mate 9, Mate 9 Pro Huawei smart phones with software before ALP-AL00 8.0.0.120(SP2C00), before BLA-AL00 8.0.0.120(SP2C00), before MHA-AL00B…
CVE-2018-7934, published 2018-07-31. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. Some Huawei mobile phone with the versions before BLA-L29 8.0.0.145(C432) have a denial of service (DoS) vulnerability because they do not adapt to specific screen gestures. An attacker may trick…
CVE-2020-1785, published 2020-01-03. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability. The system does not properly check the status of certain module during certain operations, an attacker should…
CVE-2018-7989, published 2018-10-17. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. Huawei Mate 10 pro smartphones with the versions before BLA-AL00B 8.1.0.326(C00) have an improper authentication vulnerability. App Lock is a function to prevent unauthorized use of apps on…
CVE-2018-7990, published 2018-09-04. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. Mate10 Pro Huawei smart phones with the versions before 8.1.0.326(C00) have a FRP bypass vulnerability. During the mobile phone reseting process, an attacker could bypass "Find My Phone" protect…
CVE-2018-7936, published 2018-09-04. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. Mate 10 Pro Huawei smart phones with the versions before BLA-L29 8.0.0.148(C432) have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the…
CVE-2019-5264, published 2019-12-13. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. There is an information disclosure vulnerability in certain Huawei smartphones (Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9). The…