Huawei Updates
2596Warning Date
Severity Level
Warning Number
Target Sector
13 August, 2020
● High
2020-1634
All
Description:
Huawei has released security updates to address several vulnerabilities in the following products:
- HUAWEI Mate 20
- 9.0.0.205(C00E205R2P1)
- ManageOne
- 8.0.0
- 8.0.0.SPC100
- iManager NetEco
- V600R009C00
- V600R009C10SPC200
- iManager NetEco 6000
- V600R008C00SPC100
- V600R008C10
- FusionCompute
- 8.0.0
- Taurus-AL00B
- Versions earlier than 10.1.0.126(C00E125R5P3)
- E6878-370
- 10.0.3.1(H563SP1C00)
- 10.0.3.1(H563SP21C233)
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Unauthorized modification
- Command injection
- Denial of service attack (DoS)
- Bypass of a protection mechanism
Best practice and Recommendations:
The CERT team encourages users to review Huawei security advisory and apply the necessary updates:
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200812-01-smartphone-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200812-01-fastjson-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200812-01-authentication-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200812-01-compute-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200812-02-smartphone-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200812-01-fc-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200812-01-auth-en