Test ID:	1.3.6.1.4.1.25623.1.1.2.2025.1064
Category:	Huawei EulerOS Local Security Checks
Title:	Huawei EulerOS: Security Advisory for uboot-tools (EulerOS-SA-2025-1064)
Summary:	The remote host is missing an update for the Huawei EulerOS 'uboot-tools' package(s) announced via the EulerOS-SA-2025-1064 advisory.
Description:	Summary: The remote host is missing an update for the Huawei EulerOS 'uboot-tools' package(s) announced via the EulerOS-SA-2025-1064 advisory. Vulnerability Insight: There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer.(CVE-2022-2347) Affected Software/OS: 'uboot-tools' package(s) on Huawei EulerOS V2.0SP9(x86_64). Solution: Please install the updated package(s). CVSS Score: 6.2 CVSS Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-2347 https://seclists.org/oss-sec/2022/q3/41
Copyright	Copyright (C) 2025 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.