Security Advisory-The AR Abnormally Resets When Receiving Special DHCP Packets

Access Router AR is a low-end router of Huawei. It provides both mobile and fixed network access modes, applies to enterprises. In application processing on the live network, when special ip phone use DHCP to requests for address information from the AR, a special field is carried in the request...

Security Notice – Statement About Apache Log4j2 Vulnerabilities

Huawei has noticed that since December 9, the Apache official website has disclosed the Apache Log4j2 remote code execution vulnerability CVE-2021-44228, followed by the CVE-2021-45046 and CVE-2021-45105 vulnerabilities. These vulnerabilities can be remotely exploited. To prevent these...

Security Advisory - Information Exposure Vulnerability in Some Smart Phones

There is an information exposure vulnerability in some Huawei smart phones. When the user's smart phone connects to the malicious device for charging, an unauthenticated attacker may activate some specific function by sending some specially crafted messages. Due to insufficient input validation o...

Security Advisory - Improper Access Control Vulnerability in Some Huawei OceanStor products

There is an improper access control vulnerability in Some Huawei OceanStor products. Due to incorrectly restrict access to a resource, an attacker with high privilege may exploit the vulnerability to query some information or send specific message to cause some service abnormal. Vulnerability ID:...

Security Advisory - DoS Vulnerability in Multiple Huawei Products

There is a DoS vulnerability in some Huawei products. Since the device does not validate the parameters in a certain command, an attacker with certain permissions could log in and deliver the command containing a malicious parameter to make the device restart. Vulnerability ID: HWPSIRT-2016-06064...

Security Advisory - Out-of-Bounds Memory Access Vulnerability on Some Huawei FireWall Products

There is an Out-of-Bounds memory access vulnerability in Huawei FireWall products due to insufficient verification. An authenticated local attacker can make processing crash by executing some commands. The attacker can exploit this vulnerability to cause a denial of service. Vulnerability ID:...

Security Advisory - Command Injection Vulnerability in OpsMonitor

There is a command injection vulnerability in OpsMonitor service. Due to lack of validation of user input, an authenticated user may inject malicious command into the affected products, causing command execution with root privilege in OpsMonitor service. Vulnerability ID: HWPSIRT-2017-10062 Huawe...

Security Advisory - Permission Control Vulnerability in Smart Phones

Some Huawei Smart phones have a permission control vulnerability. Due to improper authorization configuration on specific device information, an attacker with the root privilege can exploit this vulnerability to modify specific device information. Vulnerability ID: HWPSIRT-2017-08157 This...

Security Notice - Statement on App Lock Bypass Vulnerability in Huawei EMUI

Huawei noticed that some researcher published an App lock bypass vulnerability in Huawei EMUI. Huawei immediately launched a thorough investigation. Huawei has delivered Security Advisories. The link of the security advisory is:...

Security Advisory - Sensitive Information Disclosure Vulnerability on FusionSphere OpenStack

There is a sensitive information disclosure vulnerability on FusionSphere OpenStack. The software stores some sensitive information with insufficient access control. An unauthenticated remote attacker could get sensitive information by accessing certain ports. Vulnerability ID: HWPSIRT-2017-06223...

Security Advisory - Weak Encryption Vulnerability in the OceanStor ReplicationDirector

OceanStor ReplicationDirector is designed to manage disaster recovery DR service of data centers DC for enterprises. Huawei OceanStor ReplicationDirector has weak encryption vulnerability. An attacker may exploit it to craft server certificate signatures. Vulnerability ID: HWPSIRT-2016-05156 Huaw...

Security Advisory - DoS Vulnerability in Huawei U1900 CLI Module

Huawei eSpace U1900 switch series provides professional IP voice solutions to meet communications requirements from various enterprises of different sizes. Huawei eSpace U1900 series includes eSpace U1910, U1911, U1930, U1960, U1980, and U1981. The U1900 series uses the Command Line Interface CLI...

Security Advisory - OS Command Injection Vulnerability in Huawei EnzoH Products

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution.Vulnerability ID:HWPSIRT-2024-34444 This vulnerability has been assigned a CVE ID:CVE-2024-58256...

Security Advisory - Input Validation Vulnerability in Wi-Fi Driver of Huawei Smart Phones

There is an input validation vulnerability in the Wi-Fi Driver of some Huawei smart phones. An attacker can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone to crash the system or escalate privilege. Vulnerability ID:...

Security Notice - Statement on the article about “Devil's Ivy” Vulnerability published on WIRED

Huawei noticed that an article "Hack Brief: 'Devil's Ivy' Vulnerability Could Afflict Millions of IoT Devices" published at WIRED on July 18, 2017. The article mentioned that there was a vulnerability named "Devil's Ivy" CVE-2017-9765 in gSOAP. Huawei products are affacted by this vulnerability...

Security Notice - Statement on Local Privilege Escalation Vulnerability (CVE-2026-46300) "Fragnesia" in Linux Kernel

Following the discovery of the local privilege escalation vulnerability CVE-2026-46300 "Fragnesia" in Linux Kernel, known as a variant of DirtyFrag, Huawei has launched an immediate investigation. Successful exploitation of this vulnerability may allow attackers to escalate local privileges throu...

Security Advisory - OS Command Injection Vulnerability in Huawei EnzoH Products

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution.Vulnerability ID:HWPSIRT-2024-23552 This vulnerability has been assigned a CVE ID: CVE-2024-58257...

Statement About the DoS Vulnerability in the E5573Cs-322

Huawei has been informed by the security researcher Lawrence Amer that the 21.328.01.00.00 version of the E5573Cs-322 has a DoS vulnerability CVE-2018-7935. Remote attackers could exploit this vulnerability to make the network where the E5573Cs-322 is running temporarily unavailable. Huawei has...

Security Notice - Statement on the Piracy Issue in Huawei OTT Service

Huawei noticed an article titled "Huawei OTT Vulnerability FREE TV FOR EVERYONE" released by security researcher Nebojsa Terzic on LinkedIn on January 18, 2017. Before the disclosure, Nebojsa Terzic had reported the issue to Huawei PSIRT. Huawei launched an investigation immediately. After...

Security Notice - Statement about the FreakOut Malware

Huawei has noticed media reports on an attack by the FreakOut malware. This attack exploits CVE-2020-28188, CVE-2021-3007, and CVE-2020-7961 vulnerabilities. Huawei has finished investigation and analysis regarding FreakOut. It is confirmed that Huawei products do not involve CVE-2020-28188...

Security Notice - Statement on Security Vulnerabilities of Huawei Mate9 Pro Demonstrated at the Mobile Pwn2Own Contest in the PacSec Conference

On November 1, 2017, security researchers demonstrated security vulnerabilities of Huawei Mate 9 Pro in the Mobile Pwn2Own competition at the PacSec conference in Japan. Huawei has talked to the security researchers on site and obtained the vulnerability information, and has started analysis...

Security Notice - Statement about a Set of Vulnerabilities in Dnsmasq named DNSpooq

Huawei has noticed that researchers have disclosed a set of vulnerabilities in Dnsmasq named DNSpooq, involving seven vulnerabilities: CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25684, CVE-2020-25685, CVE-2020-25686, and CVE-2020-25687. Following the news, Huawei has launched an...

Security Notice – Statement About the Linux Sudo Privilege Escalation Vulnerability (CVE-2021-3156)

Qualys Research Labs disclosed a heap-based buffer overflow vulnerability CVE-2021-3156, also known as Baron Samedit in sudo, which on successful exploitation allows any local user to escalate privileges to root. Following the news, Huawei has launched an immediate investigation. The investigatio...

Security Notice - Statement About the Bootloader Vulnerabilities in Huawei Mobile Phones Disclosed at the USENIX Conference

At the USENIX conference in Canada in August 2017, Aravind Machiry, a security researcher from the University of California, Santa Barbara, released information on security vulnerabilities in the bootloaders of products from multiple vendors, including Huawei. Aravind Machiry had reported the...

Security Notice - Statement about a Set of Vulnerabilities about WiFi named FragAttacks

Huawei has noticed that researchers have disclosed a set of vulnerabilities about WiFi named FragAttacks, involving 12 vulnerabilities:...

Security Notice - Statement on Remote Code Execution Vulnerability in Huawei HG532 Product

On November 27, 2017, Huawei received a notification about a possible remote code execution vulnerability CVE-2017-17215 regarding Huawei HG532 from Muhammad Mukatren of Check Point Software Technologies Research Department, which also released a security advisory CPAI-2017-1016 but without...

Security Notice - Statement on the Shamoon Attacks Issue

Huawei noticed that Palo Alto posted a blog titled "Second Wave of Shamoon 2 Attacks Identified" on January 9, 2017. The blog mentioned that the Shamoon attack sample contains several usernames and passwords from official documentation related to Huawei virtual desktop infrastructure VDI solution...

Security Notice - Statement on Multiple Security Vulnerabilities in WPA/WPA2

On October 16, 2017, an article titled "Key Reinstallation Attacks: Key Reinstallation Attacks: Forcing Nonce Reuse in WPA2" was released, which mentioned multiple security vulnerabilities in protocols Wi-Fi Protected Access WPA and WPA2. The researcher had reported some of these vulnerabilities ...

Security Notice - Statement About Toolkit Released by Shadow Brokers

On August 15, 2016, Huawei noticed that Shadow Brokers had released a toolkit claimed as from Equation Group on GitHub website, which includes exploit tools, scripts, and manuals targeting multiple Firewall vendors. Huawei Product Security Incident Response Team PSIRT started an investigation...

Security Notice - Statement on Black Hat Europe 2016 Revealing Security Vulnerability in Huawei Mate Smart Phone

Huawei was notified about information released by Di Shen and Jiahong Fang regarding security vulnerabilities of Broadcom which affect Huawei Mate series smart phone at the Black Hat Europe 2016 conference held in November 2016. According to investigation, Huawei mobile phones are not affected by...