Huawei y6 Pro Firmware vulnerabilities

3 CVEs affecting Huawei y6 Pro Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-5252, published 2019-12-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-17140, published 2018-03-05. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. Huawei Enjoy 5s and Y6 Pro smartphones with software the versions before TAG-AL00C92B170; the versions before TIT-L01C576B121 have an information leak vulnerability due to the lack of parameter…
CVE-2017-2735, published 2017-11-22. High severity, CVSS 7.1. EPSS: 0.6% chance of exploitation in the next 30 days. TIT-AL00 smartphones with software versions earlier before TIT-AL00C583B214 have a exposed system interface vulnerability. The software provides a system interface for interaction with external…
CVE-2019-5252, published 2019-12-14. Low severity, CVSS 3.5. EPSS: 0.2% chance of exploitation in the next 30 days. There is an improper authentication vulnerability in Huawei smartphones (Y9, Honor 8X, Honor 9 Lite, Honor 9i, Y6 Pro). The applock does not perform a sufficient authentication in a rare condition.…