Huawei Taurus-AL00B Firmware vulnerabilities

4 CVEs affecting Huawei Taurus-AL00B Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-9237, published 2020-08-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-5233, published 2019-11-13. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. Huawei smartphones with versions earlier than Taurus-AL00B 10.0.0.41(SP2C00E41R3P2) have an improper authentication vulnerability. Successful exploitation may cause the attacker to access specific…
CVE-2020-9070, published 2020-04-20. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. Huawei smartphones Taurus-AL00B with versions earlier than 10.0.0.205(C00E201R7P2) have an improper authentication vulnerability. The software insufficiently validate the user's identity when a user…
CVE-2020-9237, published 2020-08-17. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Huawei smartphone Taurus-AL00B with versions earlier than 10.1.0.126(C00E125R5P3) have a user after free vulnerability. A module is lack of lock protection. Attackers can exploit this vulnerability…
CVE-2020-9065, published 2020-03-26. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Huawei smart phone Taurus-AL00B with versions earlier than 10.0.0.203(C00E201R7P2) have a use-after-free (UAF) vulnerability. An authenticated, local attacker may perform specific operations to…