Huawei Updates
2414Warning Date
Severity Level
Warning Number
Target Sector
26 April, 2020
● Medium
2020-1175
All
Description:
Huawei has released security updates to address several vulnerabilities in the following products:
- OSD
- Versions earlier than OSD_uwp_9.0.32.0
- Honor V10
- Versions earlier than 10.0.0.156(C00E156R2P4)
- AR3200
- V200R007C00SPC900
- V200R007C00SPCa00
- V200R007C00SPCb00
- V200R007C00SPCc00
- V200R009C00SPC500
- HUAWEI Mate 20
- Versions earlier than 10.0.0.188(C00E74R3P8)
- PCManager
- Versions earlier than 10.0.5.53
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Unauthorized disclosure of information
- Escalation of privilege
- Bypass of a protection mechanism
Best practice and Recommendations:
The CERT team encourages users to review Huawei security advisory and apply the necessary updates:
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-01-osd-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-02-smartphone-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-01-authentication-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-01-smartphone-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-01-pcmanager-en