VYPR

P40 Firmware

by Huawei

CVEs (2)

  • CVE-2021-37104HigSep 28, 2021
    risk 0.49cvss 7.5epss 0.01

    There is a server-side request forgery vulnerability in HUAWEI P40 versions 10.1.0.118(C00E116R3P3). This vulnerability is due to insufficient validation of parameters while dealing with some messages. A successful exploit could allow the attacker to gain access to certain…

  • CVE-2020-9119MedDec 24, 2020
    risk 0.40cvss 6.2epss 0.00

    There is a privilege escalation vulnerability on some Huawei smart phones due to design defects. The attacker needs to physically contact the mobile phone and obtain higher privileges, and execute relevant commands, resulting in the user's privilege promotion.