Huawei Updates
3442Warning Date
Severity Level
Warning Number
Target Sector
14 November, 2019
● Medium
2019-630
All
Description:
Huawei has released security Updates to address vulnerabilities in the following products:
- P20 Smartphone Versions earlier than Emily-L29C 9.1.0.311(C10E2R1P13T8) Versions earlier than Emily-L29C 9.1.0.311(C461E2R1P11T8) Versions earlier than Emily-L29C 9.1.0.311(C605E2R1P12T8) Versions earlier than Emily-L29C 9.1.0.311(C432E7R1P11T8)
- Routers CD10-10, CD16-10, CD17-10, CD18-10
- Routers TC5200-10
- Routers HiRouter-CD15-10, CD20-10, CD21-16, CD30-10, CD30-11, H1-10
- Routers WS5100-10, WS5102-10, WS5106-10, WS5108-10, WS5200-10, WS5200-11, WS5280-10, WS5280-11, WS6500-10, WS6500-11, WS826-10
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Delete certain file on the victim's smartphone
- Unauthorized disclosure of information
- Execute arbitrary code
- Escalation of privilege
Best practice and Recommendations:
The CERT team encourages users to review Huawei security advisory and apply the necessary Updates:
- https://www.huawei.com/en/psirt/all-bulletins
- The product that supports automatic update will receive a system update prompt. You can install the update to fix the vulnerability.
- Update Smartphone https://consumer.huawei.com/en/support/update/
- Update routershttp://support.huawei.com/enterprise/eg/software/universal-service-router-pid-7923146