Vulnerability in Huawei Hege-560
CVE-2020-1843
Huawei HEGE-560 version 1.0.1.20(SP2), OSCA-550 version 1.0.0.71(SP1), OSCA-550A version 1.0.0.71(SP1), OSCA-550AX version 1.0.0.71(SP2), and OSCA-550X version 1.0.0.71(SP2) have an insufficient verification vulnerability. An attacker can perform specific operations to exploit this vulnerability by physical access methods. Successful exploitation may cause the attacker perform an illegal operation.
EPSS: 0.002 (13.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Huawei Hege-560 — versions 1.0.1.20(SP2)
- Huawei Hege-560_firmware — versions 1.0.1.20\(sp2\)
- Huawei Osca-550 — versions 1.0.0.71(SP1)
- Huawei Osca-550a — versions 1.0.0.71(SP1)
- Huawei Osca-550a_firmware — versions 1.0.0.71\(sp1\)
- Huawei Osca-550ax — versions 1.0.0.71(SP2)
- Huawei Osca-550ax_firmware — versions 1.0.0.71\(sp2\)
- Huawei Osca-550_firmware — versions 1.0.0.71\(sp1\)
- Huawei Osca-550x — versions 1.0.0.71(SP2)
- Huawei Osca-550x_firmware — versions 1.0.0.71\(sp2\)
References
- psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-1843?
- CVE-2020-1843 is a medium-severity vulnerability in Huawei Hege-560. CVSS score: 6.8/10. Published 2020-02-18.
- How severe is CVE-2020-1843?
- Medium severity. CVSS v3 base score is 6.8 out of 10.