ASUS Zenfone 3 Max Firmware vulnerabilities

4 CVEs affecting ASUS Zenfone 3 Max Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-14993, published 2019-04-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-14993, published 2019-04-25. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. The ASUS Zenfone V Live Android device with a build fingerprint of asus/VZW_ASUS_A009/ASUS_A009:7.1.1/NMF26F/14.0610.1802.78-20180313:user/release-keys and the Asus ZenFone 3 Max Android device with…
CVE-2018-14979, published 2018-12-28. Medium severity, CVSS 4.7. EPSS: 0.4% chance of exploitation in the next 30 days. The ASUS ZenFone 3 Max Android device with a build fingerprint of asus/US_Phone/ASUS_X008_1:7.0/NRD90M/US_Phone-14.14.1711.92-20171208:user/release-keys contains a pre-installed app with a package…
CVE-2018-14992, published 2018-12-28. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. The ASUS ZenFone 3 Max Android device with a build fingerprint of asus/US_Phone/ASUS_X008_1:7.0/NRD90M/US_Phone-14.14.1711.92-20171208:user/release-keys contains a pre-installed platform app with a…
CVE-2018-14980, published 2019-04-25. High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days. The ASUS ZenFone 3 Max Android device with a build fingerprint of asus/US_Phone/ASUS_X008_1:7.0/NRD90M/US_Phone-14.14.1711.92-20171208:user/release-keys contains the android framework (i.e.,…