Huawei Nova 2 Plus Firmware vulnerabilities

4 CVEs affecting Huawei Nova 2 Plus Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-7988, published 2018-11-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-8203, published 2017-11-22. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. The Bastet Driver of Nova 2 Plus,Nova 2 Huawei smart phones with software of Versions earlier than BAC-AL00C00B173,Versions earlier than PIC-AL00C00B173 has a use after free (UAF) vulnerability. An…
CVE-2017-8215, published 2017-11-22. Medium severity, CVSS 6.2. EPSS: 0.3% chance of exploitation in the next 30 days. Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL00C00B391, versions earlier than FRD-DL00C00B391, versions…
CVE-2017-8214, published 2017-11-22. Medium severity, CVSS 6.2. EPSS: 0.3% chance of exploitation in the next 30 days. Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL00C00B391, versions earlier than FRD-DL00C00B391, versions…
CVE-2018-7988, published 2018-11-27. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone…