Huawei Mate 30 Pro Firmware vulnerabilities

9 CVEs affecting Huawei Mate 30 Pro Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-9119, published 2020-12-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-0022, published 2020-02-13. High severity, CVSS 8.8. EPSS: 6.1% chance of exploitation in the next 30 days. In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no…
CVE-2020-9256, published 2020-07-18. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. Huawei Mate 30 Pro smartphones with versions earlier than 10.1.0.150(C00E136R5P3) have an improper authorization vulnerability. The system does not properly restrict the use of system service by…
CVE-2020-1801, published 2020-04-10. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. There is an improper authentication vulnerability in several smartphones. Certain function interface in the system does not sufficiently validate the caller's identity in certain share scenario,…
CVE-2020-1794, published 2020-03-20. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to…
CVE-2020-1793, published 2020-03-20. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to…
CVE-2020-9119, published 2020-12-24. Medium severity, CVSS 6.2. EPSS: 0.2% chance of exploitation in the next 30 days. There is a privilege escalation vulnerability on some Huawei smart phones due to design defects. The attacker needs to physically contact the mobile phone and obtain higher privileges, and execute…
CVE-2020-1838, published 2020-07-06. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. HUAWEI Mate 30 Pro with versions earlier than 10.1.0.150(C00E136R5P3) have is an improper authentication vulnerability. The device does not sufficiently validate certain credential of user's face, an…
CVE-2020-1795, published 2020-03-20. Low severity, CVSS 2.4. EPSS: 0.2% chance of exploitation in the next 30 days. There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation when the Digital Balance function is on. Successful exploit could allow the…
CVE-2020-1796, published 2020-03-20. Medium severity, CVSS 6.6. EPSS: 0.2% chance of exploitation in the next 30 days. There is an improper authorization vulnerability in several smartphones. The software incorrectly performs an authorization to certain user, successful exploit could allow a low privilege user to do…