Laya-al00ep Firmware (Huawei) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2021-07-13. Vendor: Huawei.

CVEs of Laya-al00ep Firmware

• CVE-2021-22440 - CVSS 4.6 (medium), 2021-07-13: There is a path traversal vulnerability in some Huawei products. The vulnerability is due to that the software uses external input to construct a pathname…
• CVE-2020-9247 - CVSS 7.8 (high), 2020-12-07: There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parameter which is passed…
• CVE-2020-9109 - CVSS 4.6 (medium), 2020-10-12: There is an information disclosure vulnerability in several smartphones. The device does not sufficiently validate the identity of smart wearable device in…
• CVE-2019-5235 - CVSS 5.3 (medium), 2019-12-14: Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this…
• CVE-2019-9506 - CVSS 8.1 (high), 2019-08-14: The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from…