Huawei p10 Firmware vulnerabilities

10 CVEs affecting Huawei p10 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-7938, published 2018-09-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-2726, published 2017-11-22. High severity, CVSS 8.4. EPSS: 1.4% chance of exploitation in the next 30 days. Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root…
CVE-2017-2724, published 2017-11-22. High severity, CVSS 8.4. EPSS: 1.4% chance of exploitation in the next 30 days. Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root…
CVE-2017-2725, published 2017-11-22. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root…
CVE-2017-8150, published 2017-11-22. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, the versions before Vicky-L29AC605B162…
CVE-2017-8172, published 2017-11-22. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. Isub service in P10 Plus and P10 smart phones with earlier than VKY-AL00C00B157 versions and earlier than VTR-AL00C00B157 versions has a denial of service (DoS) vulnerability. An attacker tricks a…
CVE-2017-8144, published 2017-11-22. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. Honor 5A,Honor 8 Lite,Mate9,Mate9 Pro,P10,P10 Plus Huawei smartphones with software the versions before CAM-L03C605B143CUSTC605D003,the versions before Prague-L03C605B161,the versions before…
CVE-2017-8146, published 2017-11-22. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. The call module of P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167, versions before VTR-TL00C01B167, versions before VKY-AL00C00B167, versions before VKY-TL00C01B167 has a…
CVE-2017-8145, published 2017-11-22. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. The call module of P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167, versions before VTR-TL00C01B167, versions before VKY-AL00C00B167, versions before VKY-TL00C01B167 has a…
CVE-2018-7938, published 2018-09-04. Low severity, CVSS 3.3. EPSS: 0.5% chance of exploitation in the next 30 days. P10 Huawei smartphones with the versions before Victoria-AL00AC00B217 have an information leak vulnerability due to the lack of permission validation. An attacker tricks a user into installing a…
CVE-2017-8149, published 2017-11-22. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, the versions before Vicky-L29AC605B162…