I'm probably picking nits, but is something intentionally designed and implemented a "flaw" if it works as intended?
From Huawei/CCP standpoint it's a feature. For everyone else, it's a flaw.
The design is more consistent with a debug feature intended for troubleshooting by someone on the same LAN. Of course the debug interface shouldn't be so easy to access, but that's just stupidity, not malice.
"Apparently, all these years HiSilicon was unwilling or incapable to provide adequate security fixes for [the] same backdoor which, by the way, was implemented intentionally," Yarmak remarked.