Security Advisory - DoS Vulnerability in Huawei U1900 CLI Module

Huawei eSpace U1900 switch series provides professional IP voice solutions to meet communications requirements from various enterprises of different sizes. Huawei eSpace U1900 series includes eSpace U1910, U1911, U1930, U1960, U1980, and U1981. The U1900 series uses the Command Line Interface CLI...

Security Advisory-Vulnerability of Session ID not Updating in VP9610/9620

VP viewpoint 9610/VP9620 is the multi-point control unit of Huawei Video Conference system. By testing, there is a vulnerability of “Session ID not updating” in VP9610/9620. Vulnerability ID: HWNSIRT-2013-0318 Currently, official fixs are available...

Security Advisory - Multiple Vulnerabilities in MTK Platform

There are multiple vulnerabilities in MTK platform used in Huawei smart phones. There is a integer overflow vulnerability in MTK platform used in Huawei smart phones. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter to escalate...

Security Advisory - OS Command Injection Vulnerability in Huawei EnzoH Products

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution.Vulnerability ID:HWPSIRT-2024-64643 This vulnerability has been assigned a CVE ID: CVE-2024-58255...

Security Advisory - Command Injection Vulnerability in OpsMonitor

There is a command injection vulnerability in OpsMonitor service. Due to lack of validation of user input, an authenticated user may inject malicious command into the affected products, causing command execution with root privilege in OpsMonitor service. Vulnerability ID: HWPSIRT-2017-10062 Huawe...

Security Advisory - Sensitive Information Disclosure Vulnerability on FusionSphere OpenStack

There is a sensitive information disclosure vulnerability on FusionSphere OpenStack. The software stores some sensitive information with insufficient access control. An unauthenticated remote attacker could get sensitive information by accessing certain ports. Vulnerability ID: HWPSIRT-2017-06223...

Security Advisory - Input Validation Vulnerability in Wi-Fi Driver of Huawei Smart Phones

There is an input validation vulnerability in the Wi-Fi Driver of some Huawei smart phones. An attacker can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone to crash the system or escalate privilege. Vulnerability ID:...

Security Advisory - OS Command Injection Vulnerability in Huawei EnzoH Products

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution.Vulnerability ID:HWPSIRT-2024-34444 This vulnerability has been assigned a CVE ID:CVE-2024-58256...

Statement on Local Privilege Escalation Vulnerability (CVE-2026-31431) "Copy Fail" on Linux Kernel

Following the local privilege escalation vulnerability CVE-2026-31431 "Copy Fail" on Linux Kernel, Huawei has launched an immediate investigation. Successful exploitation of this vulnerability allows attackers to escalate the local privilege to root or perform container escape. The investigation ...

Security Notice – Statement About Apache Log4j2 Vulnerabilities

Huawei has noticed that since December 9, the Apache official website has disclosed the Apache Log4j2 remote code execution vulnerability CVE-2021-44228, followed by the CVE-2021-45046 and CVE-2021-45105 vulnerabilities. These vulnerabilities can be remotely exploited. To prevent these...

Security Advisory - OS Command Injection Vulnerability in Huawei EnzoH Products

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution.Vulnerability ID:HWPSIRT-2024-23552 This vulnerability has been assigned a CVE ID: CVE-2024-58257...

Security Notice - Statement on Remote Code Execution Vulnerability in Fastjson

Huawei has recently realized the Remote Code Execution RCE vulnerability in Fastjson. A remote attacker can exploit this vulnerability by sending crafted JSON data. Successful exploitation of this vulnerability may lead to remote code execution. If you have deployed Huawei Next-Generation Firewal...

Security Notice – Statement About the Linux Sudo Privilege Escalation Vulnerability (CVE-2021-3156)

Qualys Research Labs disclosed a heap-based buffer overflow vulnerability CVE-2021-3156, also known as Baron Samedit in sudo, which on successful exploitation allows any local user to escalate privileges to root. Following the news, Huawei has launched an immediate investigation. The investigatio...

Security Notice - Statement on Remote Code Execution Vulnerability in Fastjson2

Following the discovery of the remote code execution vulnerability in Fastjson2, Huawei has launched an immediate investigation. Attackers controlling JSON requests can exploit this vulnerability to execute arbitrary code on the target server. The investigation is completed. If you have deployed...

Security Notice - Statement on Local Privilege Escalation Vulnerability (CVE-2026-46300) "Fragnesia" in Linux Kernel

Following the discovery of the local privilege escalation vulnerability CVE-2026-46300 "Fragnesia" in Linux Kernel, known as a variant of DirtyFrag, Huawei has launched an immediate investigation. Successful exploitation of this vulnerability may allow attackers to escalate local privileges throu...

Statement About the DoS Vulnerability in the E5573Cs-322

Huawei has been informed by the security researcher Lawrence Amer that the 21.328.01.00.00 version of the E5573Cs-322 has a DoS vulnerability CVE-2018-7935. Remote attackers could exploit this vulnerability to make the network where the E5573Cs-322 is running temporarily unavailable. Huawei has...

Security Notice - Statement about a Set of Vulnerabilities about WiFi named FragAttacks

Huawei has noticed that researchers have disclosed a set of vulnerabilities about WiFi named FragAttacks, involving 12 vulnerabilities:...

Security Notice - Statement about a Set of Vulnerabilities in Dnsmasq named DNSpooq

Huawei has noticed that researchers have disclosed a set of vulnerabilities in Dnsmasq named DNSpooq, involving seven vulnerabilities: CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25684, CVE-2020-25685, CVE-2020-25686, and CVE-2020-25687. Following the news, Huawei has launched an...

Security Notice - Statement about the FreakOut Malware

Huawei has noticed media reports on an attack by the FreakOut malware. This attack exploits CVE-2020-28188, CVE-2021-3007, and CVE-2020-7961 vulnerabilities. Huawei has finished investigation and analysis regarding FreakOut. It is confirmed that Huawei products do not involve CVE-2020-28188...

Security Notice - Statement on App Lock Bypass Vulnerability in Huawei EMUI

Huawei noticed that some researcher published an App lock bypass vulnerability in Huawei EMUI. Huawei immediately launched a thorough investigation. Huawei has delivered Security Advisories. The link of the security advisory is:...

Security Notice - Statement About the Bootloader Vulnerabilities in Huawei Mobile Phones Disclosed at the USENIX Conference

At the USENIX conference in Canada in August 2017, Aravind Machiry, a security researcher from the University of California, Santa Barbara, released information on security vulnerabilities in the bootloaders of products from multiple vendors, including Huawei. Aravind Machiry had reported the...

Security Notice - Statement on Security Vulnerabilities of Huawei Mate9 Pro Demonstrated at the Mobile Pwn2Own Contest in the PacSec Conference

On November 1, 2017, security researchers demonstrated security vulnerabilities of Huawei Mate 9 Pro in the Mobile Pwn2Own competition at the PacSec conference in Japan. Huawei has talked to the security researchers on site and obtained the vulnerability information, and has started analysis...

Security Notice - Statement on the Shamoon Attacks Issue

Huawei noticed that Palo Alto posted a blog titled "Second Wave of Shamoon 2 Attacks Identified" on January 9, 2017. The blog mentioned that the Shamoon attack sample contains several usernames and passwords from official documentation related to Huawei virtual desktop infrastructure VDI solution...

Security Notice - Statement on the Disclosure of Malware VPNFilter by the Cisco Talos Team

Huawei has noticed that the Cisco Talos team reported malware VPNFilter on its blog website, indicating that VPNFilter was continuously infecting routers from multiple vendors and mentioning Huawei HG8245 product. Huawei promptly communicated with the Cisco Talos team. The Cisco Talos team has...

Security Notice - Statement on Remote Code Execution Vulnerability in Huawei HG532 Product

On November 27, 2017, Huawei received a notification about a possible remote code execution vulnerability CVE-2017-17215 regarding Huawei HG532 from Muhammad Mukatren of Check Point Software Technologies Research Department, which also released a security advisory CPAI-2017-1016 but without...

Security Notice - Statement on Multiple Security Vulnerabilities in WPA/WPA2

On October 16, 2017, an article titled "Key Reinstallation Attacks: Key Reinstallation Attacks: Forcing Nonce Reuse in WPA2" was released, which mentioned multiple security vulnerabilities in protocols Wi-Fi Protected Access WPA and WPA2. The researcher had reported some of these vulnerabilities ...

Security Notice - Statement on the article about “Devil's Ivy” Vulnerability published on WIRED

Huawei noticed that an article "Hack Brief: 'Devil's Ivy' Vulnerability Could Afflict Millions of IoT Devices" published at WIRED on July 18, 2017. The article mentioned that there was a vulnerability named "Devil's Ivy" CVE-2017-9765 in gSOAP. Huawei products are affacted by this vulnerability...

Security Notice - Statement on Black Hat Europe 2016 Revealing Security Vulnerability in Huawei Mate Smart Phone

Huawei was notified about information released by Di Shen and Jiahong Fang regarding security vulnerabilities of Broadcom which affect Huawei Mate series smart phone at the Black Hat Europe 2016 conference held in November 2016. According to investigation, Huawei mobile phones are not affected by...

Security Notice - Statement on the Piracy Issue in Huawei OTT Service

Huawei noticed an article titled "Huawei OTT Vulnerability FREE TV FOR EVERYONE" released by security researcher Nebojsa Terzic on LinkedIn on January 18, 2017. Before the disclosure, Nebojsa Terzic had reported the issue to Huawei PSIRT. Huawei launched an investigation immediately. After...

Security Notice - Statement About Toolkit Released by Shadow Brokers

On August 15, 2016, Huawei noticed that Shadow Brokers had released a toolkit claimed as from Equation Group on GitHub website, which includes exploit tools, scripts, and manuals targeting multiple Firewall vendors. Huawei Product Security Incident Response Team PSIRT started an investigation...