Huawei p10 Plus Firmware vulnerabilities

15 CVEs affecting Huawei p10 Plus Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-1872, published 2020-02-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-2726, published 2017-11-22. High severity, CVSS 8.4. EPSS: 1.4% chance of exploitation in the next 30 days. Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root…
CVE-2017-2724, published 2017-11-22. High severity, CVSS 8.4. EPSS: 1.4% chance of exploitation in the next 30 days. Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root…
CVE-2017-2725, published 2017-11-22. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root…
CVE-2017-8141, published 2017-11-22. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. The Touch Panel (TP) driver in P10 Plus smart phones with software versions earlier than VKY-AL00C00B153 has a memory double free vulnerability. An attacker with the root privilege of the Android…
CVE-2017-8150, published 2017-11-22. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, the versions before Vicky-L29AC605B162…
CVE-2017-8172, published 2017-11-22. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. Isub service in P10 Plus and P10 smart phones with earlier than VKY-AL00C00B157 versions and earlier than VTR-AL00C00B157 versions has a denial of service (DoS) vulnerability. An attacker tricks a…
CVE-2017-8144, published 2017-11-22. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. Honor 5A,Honor 8 Lite,Mate9,Mate9 Pro,P10,P10 Plus Huawei smartphones with software the versions before CAM-L03C605B143CUSTC605D003,the versions before Prague-L03C605B161,the versions before…
CVE-2018-7992, published 2018-07-31. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro versions earlier than 8.0.0.356(C00); P10 Plus versions earlier than 8.0.0.357(C00) has a buffer overflow vulnerability. The…
CVE-2017-8146, published 2017-11-22. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. The call module of P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167, versions before VTR-TL00C01B167, versions before VKY-AL00C00B167, versions before VKY-TL00C01B167 has a…
CVE-2017-8145, published 2017-11-22. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. The call module of P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167, versions before VTR-TL00C01B167, versions before VKY-AL00C00B167, versions before VKY-TL00C01B167 has a…

Latest

CVE-2020-1872, published 2020-02-18. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. Huawei smart phones P10 Plus with versions earlier than 9.1.0.201(C01E75R1P12T8), earlier than 9.1.0.252(C185E2R1P9T8), earlier than 9.1.0.252(C432E4R1P9T8), and earlier than 9.1.0.255(C576E6R1P8T8)…
CVE-2017-8215, published 2017-11-22. Medium severity, CVSS 6.2. EPSS: 0.3% chance of exploitation in the next 30 days. Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL00C00B391, versions earlier than FRD-DL00C00B391, versions…
CVE-2017-8214, published 2017-11-22. Medium severity, CVSS 6.2. EPSS: 0.3% chance of exploitation in the next 30 days. Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL00C00B391, versions earlier than FRD-DL00C00B391, versions…
CVE-2017-8171, published 2017-11-22. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. Huawei smart phones with software earlier than Vicky-AL00AC00B172D versions have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory…
CVE-2017-8149, published 2017-11-22. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, the versions before Vicky-L29AC605B162…