PT-2020-7624 · Huawei+1 · Huawei P2+1

Published 2020-01-14 · Updated 2020-01-21 · CVE-2014-2271

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Kingsoft Office version 5.3.1 Huawei P2 devices before V100R001C00B043

Description The issue allows man-in-the-middle attackers to conduct downgrade attacks and execute arbitrary Java code by leveraging a network position between the client and the registry to block HTTPS traffic. This occurs because the cn.wps.moffice.common.beans.print.CloudPrintWebView in Kingsoft Office falls back to HTTP when the HTTPS connection to the registry fails.

Recommendations For Kingsoft Office version 5.3.1, consider disabling the CloudPrintWebView functionality until a patch is available to prevent potential downgrade attacks. For Huawei P2 devices before V100R001C00B043, update to a version after V100R001C00B043 to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2014-2271

Affected Products

Huawei P2

Kingsoft Office

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2014-2271 · Security Note
• https://labs.f-secure.com/assets/763/original/mwri_advisory_huawei_kingsoft-office.pdf · Note
• https://labs.f-secure.com/advisories/kingsoft-office-remote-code-execution · Note
• http://securityfocus.com/bid/71381 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/99089 · Note
• http://huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-401529.htm · Note