huawei

yale-al50a_firmware

2 known vulnerabilities · sorted by CVSS score

CVE-2019-9506

The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.

huawei / atomu-l41_firmware+206

Adjacent

Published Aug 14, 2019

CVE-2020-9081

LOW3.5

There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of operation in specific mode to exploit this vulnerability. Successful exploit could allow the attacker to bypass app lock. (Vulnerability ID: HWPSIRT-2019-12144) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9081.

huawei / mate_20_firmware+8

Physical

Published Dec 27, 2024