CVE Tools

Yale-l21a Firmware

7 CVEs tracked. 2 of them are in CISA KEV.

This hub aggregates every CVE we track for Yale-l21a Firmware, a product in the hardware firmware space. Use it to gauge the current risk picture and drill into individual advisories.

Yale-l21a Firmware CVEs per month

Oct 2024 to Sep 2026. Point at a month, or focus the strip and use the arrow keys.
Yale-l21a Firmware CVEs per month
MonthCVEs
2024-100
2024-110
2024-120
2025-010
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-050
2026-060
2026-070
2026-080
2026-090

Severity

How the 7 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • High457%
  • Medium343%

Latest CVEs

The 7 most recently published vulnerabilities affecting Yale-l21a Firmware.

  1. CVE-2020-9223There is a denial of service vulnerability in some Huawei smartphones. Due to the improper processing of received abnormal messages, remote attackers may exploit this vulnerability to cause a denia...7.5
  2. CVE-2020-9235Huawei smartphones HONOR 20 PRO Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier than 10.1.0.231(C10E3R3P2),Versions earlier than 10.1.0.231(C185E3R5P1),Versions earlier than 10.1.0.23...5.5
  3. CVE-2019-5303There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insuff...5.3
  4. CVE-2019-5302There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insuff...5.3
  5. CVE-2020-0069In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local...7.8
  6. CVE-2019-2215A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does requi...7.8
  7. CVE-2019-9506Blutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiation8.1

Product grouping is registry-driven, with AI assist and human review. How it works

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store