Huawei Oxfords-AN00A Firmware vulnerabilities

4 CVEs affecting Huawei Oxfords-AN00A Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-22400, published 2021-08-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-22400, published 2021-08-03. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. Some Huawei Smartphones has an insufficient input validation vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The app can modify…
CVE-2020-1878, published 2020-03-20. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Huawei smartphone OxfordS-AN00A with versions earlier than 10.0.1.152D(C735E152R3P3),versions earlier than 10.0.1.160(C00E160R4P1) have an improper authentication vulnerability. Authentication to…
CVE-2020-9235, published 2020-09-03. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Huawei smartphones HONOR 20 PRO Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier than 10.1.0.231(C10E3R3P2),Versions earlier than 10.1.0.231(C185E3R5P1),Versions earlier than…
CVE-2021-22440, published 2021-07-13. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. There is a path traversal vulnerability in some Huawei products. The vulnerability is due to that the software uses external input to construct a pathname that is intended to identify a file or…