Huawei Updates
2595Warning Date
Severity Level
Warning Number
Target Sector
19 March, 2020
● Low
2020-1041
All
Description:
Huawei has released security updates to address vulnerabilities in the following products:
- CampusInsight V100R019C00
- ManageOne 6.5.RC2.B050
- Secospace AntiDDoS8000
- V500R001C00
- V500R001C20
- V500R001C60
- V500R005C00
- HUAWEI Mate 20 Versions earlier than 10.0.0.188(C00E74R3P8)
- HUAWEI Mate 30 Pro Versions earlier than 10.0.0.203(C00E202R7P2)
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Execute arbitrary commands
- Unauthorized disclosure of information
- Bypass of a protection mechanism
Best practice and Recommendations:
The CERT team encourages users to review Huawei security advisory and apply the necessary updates:
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-01-free-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-01-authentication-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-02-smartphone-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-04-smartphone-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-05-smartphone-en