Huawei Updates
2719Warning Date
Severity Level
Warning Number
Target Sector
1 October, 2020
● Medium
2020-1860
All
Description:
Huawei has released security updates to address multiple vulnerabilities in the following products:
- HUAWEI P30 Pro
- Versions earlier than 10.1.0.160(C00E160R2P8)
- Versions earlier than 10.1.0.160(C01E160R2P8)
- HiRouter-CD30-10
- 10.0.2.5
- HiRouter-CT31-10
- 10.0.2.20
- WS5200-12
- 10.0.1.9
- WS5281-10
- 10.0.5.10
- WS5800-10
- 10.0.3.25
- WS7100-10
- 10.0.5.21
- WS7200-10
- 10.0.5.21
- Taurus-AL00A
- 10.0.0.1(C00E1R1P1)
- HUAWEI Mate 20
- Versions earlier than 10.1.0.160(C00E160R3P8)
- Versions earlier than 10.1.0.160(C01E160R2P8)
- HUAWEI Mate 20 X
- Versions earlier than 10.1.0.160(C00E160R2P8)
- Versions earlier than 10.1.0.160(C01E160R2P8)
- Laya-AL00EP
- Versions earlier than 10.1.0.160(C786E160R3P8)
- Tony-AL00B
- Versions earlier than 10.1.0.160(C00E160R2P11)
- Tony-TL00B
- Versions earlier than 10.1.0.160(C01E160R2P11)
- Taurus-AN00B
- Versions earlier than 10.1.0.156(C00E155R7P2)
- CIS
- V100R019C10SPC100
- FusionAccess
- 6.5.1
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Denial of Service (DoS).
- Information Leak.
- Privilege escalation.
- Device reboot.
- Service abnormal.
Best practice and Recommendations:
The CERT team encourages users to review Huawei security advisory and apply the necessary updates:
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200930-01-buffer-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200930-01-verification-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200930-02-smartphone-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200930-01-pathtraversal-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200930-01-readwriteoutbound-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200930-01-outofbound-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200930-01-dos-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200930-02-informationleak-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200930-01-smartphone-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200930-01-homerouter-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200930-01-qemu-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200930-02-bufferoverflow-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200930-01-bufferoverflow-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200930-01-fa-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200930-03-smartphone-en