Nova 3
Vendor:
First CVE: Dec 4, 2018 · Active for 7 years
5
Total CVEs
More Total CVEs than 77% of tracked products
1.7
Avg CVEs / Year
Higher CVE frequency than 59% of tracked products
7.6
Avg CVSS
Higher Avg CVSS than 59% of tracked products
40.0%
KEV Rate
Higher KEV Rate than 98% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Nova 3 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 4, 2018
7 years ago
Most Recent CVE
Mar 10, 2020
2,328 days ago
CVE Severity & Scoring
Nova 35 CVEs
20%
80%
All CVEs352,708 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local2 (40.0%)
Network1 (20.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network2 (40.0%)
Attack Complexity
Low5 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None5 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low2 (40.0%)
High0 (0.0%)
None3 (60.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (5 CVEs).
5 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2019-2215HIGH A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploi | Oct 11, 2019 | 7.8 | 92 | YES | YES |
CVE-2020-0069HIGH In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This co | Mar 10, 2020 | 7.8 | 60 | YES | NO |
CVE-2020-0022HIGH In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Blue | Feb 13, 2020 | 8.8 | 29 | NO | NO |
CVE-2019-9506HIGH The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length n | Aug 14, 2019 | 8.1 | 21 | NO | NO |
CVE-2018-7956MEDIUM Huawei VIP App is a mobile app for Malaysia customers that purchased P20 Series, Nova 3/3i and Mate 20. There is a vulnerability in versions before 4.0.5 that attackers can conduct | Dec 4, 2018 | 5.3 | 19 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (5 CVEs).
CISA KEV
2 CVEs
40.0% of CVEs· 98th percentile
Metasploit
1 CVE
20.0% of CVEs· 97th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
20.0% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (5 CVEs).
Media Mentions
Signals from CVEs in this product scope (5 CVEs).
Top CNAs Publishing CVEs For Nova 3
Top CWEs
Versions
No cataloged versions.