P20
Vendor:
First CVE: Dec 4, 2018 · Active for 7 years
13
Total CVEs
More Total CVEs than 91% of tracked products
4.3
Avg CVEs / Year
Higher CVE frequency than 86% of tracked products
5.8
Avg CVSS
Higher Avg CVSS than 17% of tracked products
7.7%
KEV Rate
Higher KEV Rate than 97% of tracked products
Trends Over Time
The number and severity of CVEs published that impact P20 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 4, 2018
7 years ago
Most Recent CVE
Sep 11, 2020
2,143 days ago
CVE Severity & Scoring
P2013 CVEs
69%
23%
All CVEs352,708 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local4 (30.8%)
Network1 (7.7%)
Unknown0 (0.0%)
Physical3 (23.1%)
Adjacent Network5 (38.5%)
Attack Complexity
Low10 (76.9%)
High3 (23.1%)
Unknown0 (0.0%)
User Interaction
None10 (76.9%)
Unknown0 (0.0%)
Required3 (23.1%)
Privileges Required
Low2 (15.4%)
High0 (0.0%)
None11 (84.6%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (13 CVEs).
13 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2019-2215HIGH A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploi | Oct 11, 2019 | 7.8 | 92 | YES | YES |
CVE-2020-0022HIGH In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Blue | Feb 13, 2020 | 8.8 | 29 | NO | NO |
CVE-2019-9506HIGH The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length n | Aug 14, 2019 | 8.1 | 21 | NO | NO |
CVE-2018-7987MEDIUM There is an out-of-bounds write vulnerability on Huawei P20 smartphones with versions before 8.1.0.171(C00). The software does not handle the response message properly when the use | Dec 4, 2018 | 5.9 | 21 | NO | NO |
CVE-2020-9239MEDIUM Huawei smartphones BLA-A09 versions 8.0.0.123(C212),versions earlier than 8.0.0.123(C567),versions earlier than 8.0.0.123(C797);BLA-TL00B versions earlier than 8.1.0.326(C01);Berke | Sep 11, 2020 | 5.5 | 20 | NO | NO |
CVE-2019-5211MEDIUM The Huawei Share function of P20 phones with versions earlier than Emily-L29C 9.1.0.311 has an improper file management vulnerability. The attacker tricks the victim to perform cer | Nov 29, 2019 | 5.7 | 20 | NO | NO |
CVE-2019-5230MEDIUM P20 Pro, P20, Mate RS smartphones with versions earlier than Charlotte-AL00A 9.1.0.321(C00E320R1P1T8), versions earlier than Emily-AL00A 9.1.0.321(C00E320R1P1T8), versions earlier | Nov 13, 2019 | 5.5 | 20 | NO | NO |
CVE-2019-5303MEDIUM There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devic | Apr 27, 2020 | 5.3 | 19 | NO | NO |
CVE-2019-5302MEDIUM There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devic | Apr 27, 2020 | 5.3 | 18 | NO | NO |
CVE-2019-5283MEDIUM There is Factory Reset Protection (FRP) bypass security vulnerability in P20 Huawei smart phones versions earlier than Emily-AL00A 9.0.0.167 (C00E81R1P21T8). When re-configuring th | Jun 4, 2019 | 4.6 | 17 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (13 CVEs).
CISA KEV
1 CVE
7.7% of CVEs· 97th percentile
Metasploit
1 CVE
7.7% of CVEs· 97th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
7.7% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (13 CVEs).
Media Mentions
Signals from CVEs in this product scope (13 CVEs).
Top CNAs Publishing CVEs For P20
Top CWEs
Versions
No cataloged versions.