Description:

Huawei has released security updates to address several vulnerabilities in the following products:

• FusionSphere OpenStack
  • 8.0.0
• FusionCompute
  • 8.0.0
• HUAWEI MateBook 13
  • Running the affected Windows Versions
• HUAWEI MateBook 14
  • Running the affected Windows Versions
• HUAWEI MateBook D
  • Running the affected Windows Versions
• HUAWEI MateBook X Pro
  • Running the affected Windows Versions
• HUAWEI Mate 30
  • Versions earlier than 10.1.0.150(C00E136R5P3)
• HUAWEI Mate 20
  • Versions earlier than 10.1.0.160(C00E160R3P8)
• HUAWEI Mate 20 Pro
  • Versions earlier than 10.1.0.270(C431E7R1P5)
  • Versions earlier than 10.1.0.270(C635E3R1P5)
  • Versions earlier than 10.1.0.273(C636E7R2P4)
• HUAWEI Mate 20 X
  • Versions earlier than 10.1.0.160(C00E160R2P8)
• HUAWEI P30
  • Versions earlier than 10.1.0.160(C00E160R2P11)
• HUAWEI P30 Pro
  • Versions earlier than 10.1.0.160(C00E160R2P8)
• HUAWEI Mate 20 RS
  • Versions earlier than 10.1.0.160(C786E160R3P8)
• HonorMagic2
  • Versions earlier than 10.0.0.187(C00E61R2P11)
• Honor20
  • Versions earlier than 10.0.0.175(C00E58R4P11)
• Honor20 PRO
  • Versions earlier than 10.0.0.194(C00E62R8P12)
• HonorMagic2
  • Versions earlier than 10.0.0.187(C00E61R2P11)
• HonorV20
  • Versions earlier than 10.0.0.188(C00E62R2P11)

Threats:

Attacker could exploit these vulnerabilities by doing the following:

• Denial of service attack (DoS)
• Escalation of privilege
• Execute arbitrary code

Best practice and Recommendations:

The CERT team encourages users to review Huawei security advisory and apply the necessary updates:

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200805-01-windows-en
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200805-03-smartphone-en
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200805-02-smartphone-en
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200805-01-smb-en
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200805-01-failure-en
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200805-01-smartphone-en
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200805-01-fusioncompute-en
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200805-01-fc-en