4 ms·
Why is Huawei dragging their feet on doing basic library updates on their LTE basestation firmware? HCSEC asked your company to update to modern OpenSSL a year
by StudentStuff 7y ago
Why is Huawei dragging their feet on doing basic library updates on their LTE basestation firmware?
HCSEC asked your company to update to modern OpenSSL a year ago and implement reproducible builds. Neither issue has been handled, and these LTE basestations are extremely vulnerable due to the inaction of your employer.
Source: https://www.theregister.co.uk/2019/03/28/hcsec_huawei_oversight_board_savaging_annual_report/ https://www.theregister.co.uk/2019/03/28/hcsec_huawei_oversi...
Combined with the poor engineering of your employer's Windows drivers, it is reasonable to cease use of Huawei developed software. Security is obviously not a priority, leaving users of Huawei software vulnerable to any person who can be bothered to look up a few CVEs and run Metasploit against your companies products.
Poorly written Windows Driver (priv escalation): https://www.tomshardware.com/news/microsoft-backdoor-huawei-matebook-driver,38924.html https://www.tomshardware.com/news/microsoft-backdoor-huawei-...
- unmole 7y agoLet's just say these decisions are made way above my pay grade.