CVEvulnerability

CVE-2020-1842

6.8 MEDIUM Published 2020-02-18 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-02-18
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-287

Description

Huawei HEGE-560 version 1.0.1.20(SP2); OSCA-550 and OSCA-550A version 1.0.0.71(SP1); and OSCA-550AX and OSCA-550X version 1.0.0.71(SP2) have an insufficient authentication vulnerability. An attacker can access the device physically and perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker obtain high privilege.

Affected configurations

• huawei hege-560 firmware 1.0.1.20\(sp2\) • huawei osca-550 firmware 1.0.0.71\(sp1\) • huawei osca-550a firmware 1.0.0.71\(sp1\) • huawei osca-550ax firmware 1.0.0.71\(sp2\) • huawei osca-550x firmware 1.0.0.71\(sp2\)

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References