Huawei Updates
3302Warning Date
Severity Level
Warning Number
Target Sector
15 October, 2020
● Medium
2020-1928
All
Description:
Huawei has released security updates to address multiple vulnerabilities in the following products:
- HUAWEI Mate 20
- Versions earlier than 10.1.0.163(C00E160R3P8)
- Versions earlier than 10.0.0.188(C00E74R3P8)
- Taurus-AN00B
- Versions earlier than 10.1.0.156(C00E155R7P2)
- E6878-370
- 10.0.3.1(H557SP27C233)
- 10.0.3.1(H563SP21C233)
- E6878-870
- 10.0.3.1(H557SP27C233)
- 10.0.3.1(H563SP11C233)
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Denial of Service (DoS).
- Privilege escalation.
- Arbitrary code execution.
Best practice and Recommendations:
The CERT team encourages users to review Huawei security advisory and apply the necessary updates:
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201014-01-smartphone-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201014-01-privilege-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201014-01-bluetooth-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201014-02-dos-en