Huawei Florida L23 vulnerabilities

2 vulnerabilities

Known vulnerabilities in Huawei Florida L23, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.6CVE-2019-19412huaweialp-al00b_firmware+31
EPSS score
0.21%
Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker login the Talkback mode and can perform some operations to install a third-Party application. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-frp-en.8.1CVE-2019-9506appleiphone_os+212
EPSS score
2.69%
The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.