Vulnerability in Huawei Hege-560
CVE-2020-1855
Huawei HEGE-570 version 1.0.1.22(SP3); and HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X version 1.0.1.21(SP3) have an insufficient verification vulnerability. An attacker can access the device physically and exploit this vulnerability to tamper with device information. Successful exploit may cause service abnormal.
EPSS: 0.002 (11.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H.
Affected products
- Huawei Hege-560
- Huawei Hege-560_firmware — versions 1.0.1.21\(sp3\)
- Huawei Hege-560, Osca-550, Osca-550a, Osca-550ax, Osca-550x — versions 1.0.1.21(SP3)
- Huawei Hege-570 — versions 1.0.1.22(SP3)
- Huawei Hege-570_firmware — versions 1.0.1.22\(sp3\)
- Huawei Osca-550
- Huawei Osca-550a
- Huawei Osca-550a_firmware — versions 1.0.1.21\(sp3\)
- Huawei Osca-550ax
- Huawei Osca-550ax_firmware — versions 1.0.1.21\(sp3\)
References
- psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-1855?
- CVE-2020-1855 is a medium-severity vulnerability in Huawei Hege-560. CVSS score: 6.1/10. Published 2020-02-18.
- How severe is CVE-2020-1855?
- Medium severity. CVSS v3 base score is 6.1 out of 10.