Approved changes feed: RSS · Atom

cpe:2.3:o:huawei:bla-tl00b_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorHuawei (1cc7ae8f-602e-5c48-b475-b8c42c69e952)
ProductBla Tl00B Firmware (351e4117-b143-571b-b019-25eb4a118f5c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-9239 vulnerable 2026-06-08 05:27:20.977288 Details available
Huawei smartphones BLA-A09 versions 8.0.0.123(C212),versions earlier than 8.0.0.123(C567),versions earlier than 8.0.0.123(C797);BLA-TL00B versions earlier than 8.1.0.326(C01);Berkeley-L09 versions earlier than 8.0.0.163(C10),versions earlier than 8.0.0.163(C432),Versions earlier than 8.0.0.163(C636),Versions earlier than 8.0.0.172(C10);Duke-L09 versions Duke-L09C10B187, versions Duke-L09C432B189, versions Duke-L09C636B189;HUAWEI P20 versions earlier than 8.0.1.16(C00);HUAWEI P20 Pro versions earlier than 8.1.0.152(C00);Jimmy-AL00A versions earlier than Jimmy-AL00AC00B172;LON-L29D versions LON-L29DC721B192;NEO-AL00D versions earlier than 8.1.0.172(C786);Stanford-AL00 versions Stanford-AL00C00B123;Toronto-AL00 versions earlier than Toronto-AL00AC00B225;Toronto-AL00A versions earlier than Toronto-AL00AC00B225;Toronto-TL10 versions earlier than Toronto-TL10C01B225 have an information vulnerability. A module has a design error that is lack of control of input. Attackers can exploit this vulnerab
Published: 2020-09-11T13:25:10.000Z
Updated: 2024-08-04T10:19:20.113Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9506 vulnerable 2026-06-08 05:14:25.447773 Blutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiation
HIGH (7.6)
The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.
Published: 2019-08-14T16:27:45.059Z
Updated: 2024-09-16T19:14:13.573Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-2215 vulnerable 2026-06-08 05:13:43.303566 Details available
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095
Published: 2019-10-11T18:16:48.000Z
Updated: 2025-10-21T23:45:29.242Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.