Huawei Updates
3083Warning Date
Severity Level
Warning Number
Target Sector
6 February, 2020
● Medium
2020-887
All
Description:
Huawei has released security updates to address vulnerabilities in the following products:
- HUAWEI Mate 20
- Versions earlier than 10.0.0.185(C00E74R3P8)
- NGFW Module
- V500R001C30
- V500R001C60
- V500R005C00
- NIP6300
- V500R001C30
- V500R001C60
- V500R005C00
- NIP6600
- V500R001C30
- V500R001C60
- V500R005C00
- NIP6800
- V500R001C30
- V500R001C60SPC500
- V500R005C00SPC100
- Secospace USG6500
- V500R001C30
- V500R001C60
- V500R005C00
- Secospace USG6600
- V500R001C30
- V500R001C60
- V500R005C00
- V500R001C30SPC600
- V500R001C60SPC500
- V500R005C00SPC100
- V500R001C30SPC200
- USG9500
- V500R001C30
- V500R001C60
- V500R005C00
- V500R001C30SPC600
- V500R001C60SPC500
- V500R005C00SPC100
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Unauthorized disclosure of information
- Denial of service attack (DoS)
Best practice and Recommendations:
The CERT team encourages users to review Huawei security advisory and apply the necessary updates:
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200205-01-firewall-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200205-01-dos-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200205-01-leakage-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200205-01-smartphone-en