CVSS: 8.1EPSS: 3%CPEs: 371EXPL: 1CVE-2019-9506 – Blutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiation
https://notcve.org/view.php?id=CVE-2019-9506
14 Aug 2019 — The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing. La especificación de Bluetooth BR/EDR incluyendo versión 5.1, permite una longitud de clave de cifrado suficientemente baja y no impide que un atacante influya en la negociación d... • https://github.com/francozappa/knob • CWE-310: Cryptographic Issues CWE-327: Use of a Broken or Risky Cryptographic Algorithm •
CVSS: 4.6EPSS: 0%CPEs: 2EXPL: 0CVE-2019-5283
https://notcve.org/view.php?id=CVE-2019-5283
04 Jun 2019 — There is Factory Reset Protection (FRP) bypass security vulnerability in P20 Huawei smart phones versions earlier than Emily-AL00A 9.0.0.167 (C00E81R1P21T8). When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the Talkback mode and can perform some operations to access the setting page. As a result, the FRP function is bypassed. Existe una vulnerabilidad de seguridad de derivación de la Protección de restablecimiento de fábrica (FRP) en las versiones... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190424-01-frp-en •
CVSS: 4.6EPSS: 0%CPEs: 2EXPL: 0CVE-2019-5306
https://notcve.org/view.php?id=CVE-2019-5306
04 Jun 2019 — There is a Factory Reset Protection (FRP) bypass security vulnerability in P20 Huawei smart phones versions before Emily-AL00A 9.0.0.167(C00E81R1P21T8). When re-configuring the mobile phone using the FRP function, an attacker can delete the activation lock after a series of operations. As a result, the FRP function is bypassed and the attacker gains access to the smartphone. Existe una vulnerabilidad de seguridad de derivación de la Protección de restablecimiento de fábrica (FRP) en las versiones de teléfon... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190228-01-smartphone-en •
CVSS: 5.9EPSS: 0%CPEs: 2EXPL: 0CVE-2018-7987
https://notcve.org/view.php?id=CVE-2018-7987
04 Dec 2018 — There is an out-of-bounds write vulnerability on Huawei P20 smartphones with versions before 8.1.0.171(C00). The software does not handle the response message properly when the user doing certain inquiry operation, an attacker could send crafted message to the device, successful exploit could cause a denial of service condition. Hay una vulnerabilidad de escritura fuera de límites en los smartphones Huawei P20 con versiones anteriores a la 8.1.0.171(C00). El software no maneja el mensaje de respuesta correc... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181128-02-smartphone-en • CWE-787: Out-of-bounds Write •