Ahem, Huawei, your USB LTE stick has a vuln. I SAID AHEM, Huawei, are you listening?

Huawei has belatedly fixed an embarrassing vulnerability in a USB connectivity dongle, spotted by Trustwave, after The Register intervened. The LTE USB Stick E3372 device contains a SIM card. Inserting it into a laptop gives you LTE connectivity – handy for working on the move or in a location without Wi-Fi or Ethernet …

[Anonymous Coward]

your USB LTE stick has a vuln.

"The LTE USB Stick E3372" Damn it!

"a security blunder that affects macOS users" Ah, TFFT!

[Martin an gof]

So... how do I update?

My E3372 is used as a backup in my router and occasionally on an OpenSUSE laptop. The laptop doesn't even see it as a modem - it sees a "wired ethernet adapter" and won't give me information about signal strength or connected network. I realise this MacOS vuln doesn't really affect me, but I dare say the thing could do with a firmware update from time to time and I've no clue how to go about that.

Probably wouldn't have bought a Huawei if it weren't the only recommended supported model for my router that I could find on sale, but it was so I'm stuck with it. Have to say it works pretty well, even when the signal is weak.

M.

[Anonymous Coward]

To be fair...

Nearly all closed source code I've seen is piss-poor... that's the joy of no one seeing it.

[Anonymous South African Coward]

Re: To be fair...

Agreed! Hiding the fugly crown jewels under a thick layer of bright and eye-catching sugar-coating.

[A random security guy]

Re: To be fair...

Knowing Huawei, I would not be surprised if the source code is open source that is not properly maintained, with multiple copyleft violations, and with simple wrapper scripts written by an engineer who probably had no oversight.