Huawei p7 Firmware vulnerabilities

4 CVEs affecting Huawei p7 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-8223, published 2017-04-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-8304, published 2016-04-13. High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days. Integer overflow in Huawei P7 phones with software before P7-L07 V100R001C01B606 allows remote attackers to gain privileges via a crafted application with the system or camera permission.
CVE-2015-8305, published 2016-04-07. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. Huawei Sophia-L10 smartphones with software before P7-L10C900B852 allow attackers to cause a denial of service (system panic) via a crafted application with the system or camera privilege.
CVE-2015-8223, published 2017-04-13. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B85, and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service (OS crash) by leveraging camera permissions and…
CVE-2015-7740, published 2017-04-13. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B851 and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service (OS crash) via vectors involving an application…