Description:

Huawei has released security updates to address several vulnerabilities in the following products:

• AR120-S
  • V200R007C00SPC900
  • V200R007C00SPCa00
  • V200R007C00SPCb00
  • V200R007C00SPCc00
• AR1200
  • V200R007C00SPC900
  • V200R007C00SPC900PWE
  • V200R007C00SPCa00
  • V200R007C00SPCb00
  • V200R007C00SPCb00PWE
  • V200R007C00SPCc00
• AR1200-S
  • V200R007C00SPC900
  • V200R007C00SPCb00
  • V200R007C00SPCc00
• AR150
  • V200R007C00SPC900
  • V200R007C00SPC900PWE
  • V200R007C00SPCb00
  • V200R007C00SPCb00PWE
  • V200R007C00SPCc00
• AR150-S
  • V200R007C00SPC900
  • V200R007C00SPCb00
  • V200R007C00SPCc00
• AR160
  • V200R007C00SPC900
  • V200R007C00SPC900PWE
  • V200R007C00SPCb00
  • V200R007C00SPCb00PWE
  • V200R007C00SPCc00
• AR200
  • V200R007C00SPC900
  • V200R007C00SPC900PWE
  • V200R007C00SPCb00
  • V200R007C00SPCb00PWE
  • V200R007C00SPCc00
• AR200-S
  • V200R007C00SPC900
  • V200R007C00SPCb00
  • V200R007C00SPCc00
• AR2200
  • V200R007C00SPC900
  • V200R007C00SPC900PWE
  • V200R007C00SPCa00
  • V200R007C00SPCb00
  • V200R007C00SPCb00PWE
  • V200R007C00SPCc00
• AR2200-S
  • V200R007C00SPC900
  • V200R007C00SPCb00
  • V200R007C00SPCc00
• AR3200
  • V200R007C00
  • V200R007C00SPC900
  • V200R007C00SPC900PWE
  • V200R007C00SPCa00
  • V200R007C00SPCb00
  • V200R007C00SPCb00PWE
  • V200R007C00SPCc00
• AR3600
  • V200R007C00SPC900
  • V200R007C00SPC900PWE
  • V200R007C00SPCb00
  • V200R007C00SPCb00PWE
  • V200R007C00SPCc00
• AR510
  • V200R007C00SPC900
• NetEngine16EX
  • V200R007C00SPC900
  • V200R007C00SPCb00
  • V200R007C00SPCc00
• SRG1300
  • V200R007C00SPC900
  • V200R007C00SPCb00
  • V200R007C00SPCc00
• SRG2300
  • V200R007C00SPC900
  • V200R007C00SPCb00
  • V200R007C00SPCc00
• SRG3300
  • V200R007C00SPC900
  • V200R007C00SPCb00
  • V200R007C00SPCc00
• Taurus-AL00B
  • Versions earlier than 10.0.0.205(C00E201R7P2)
• Lion-AL00C
  • Versions earlier than 10.0.0.205(C00E202R7P2)

Threats:

Attacker could exploit these vulnerabilities by doing the following:

• Unauthorized disclosure of information

Best practice and Recommendations:

The CERT team encourages users to review Huawei security advisory and apply the necessary updates:

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-01-oob-en
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-01-smartphone-en
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-02-dos-en
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-02-smartphone-en