Huawei Elle Al00B vulnerabilities

3 vulnerabilities

Known vulnerabilities in Huawei Elle Al00B, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.2CVE-2019-5246huaweielle-al00b_firmware
EPSS score
0.17%
Smartphones with software of ELLE-AL00B 9.1.0.109(C00E106R1P21), 9.1.0.113(C00E110R1P21), 9.1.0.125(C00E120R1P21), 9.1.0.135(C00E130R1P21), 9.1.0.153(C00E150R1P21), 9.1.0.155(C00E150R1P21), 9.1.0.162(C00E160R2P1) have an insufficient verification vulnerability. The system does not verify certain parameters sufficiently, an attacker should connect to the phone and gain high privilege to launch the attack. Successful exploit could cause DOS or malicious code execution.5.3CVE-2019-5235huaweialp-al00b_firmware+49
EPSS score
0.92%
Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone to be abnormal.8.8CVE-2019-5276huaweielle-al00b_firmware
EPSS score
0.37%
Huawei smart phones with earlier versions than ELLE-AL00B 9.1.0.222(C00E220R2P1) have a buffer overflow vulnerability. An attacker may intercept and tamper with the packet in the local area network (LAN) to exploit this vulnerability. Successful exploitation may cause the affected phone abnormal.