Vulnerability in Huawei Hege-560
CVE-2020-1879
There is an improper integrity checking vulnerability on some huawei products. The software of the affected product has an improper integrity check which may allow an attacker with high privilege to make malicious modifications.Affected product versions include:HEGE-560 versions 1.0.1.21(SP3);HEGE-570 versions 1.0.1.22(SP3);OSCA-550 versions 1.0.1.21(SP3);OSCA-550A versions 1.0.1.21(SP3);OSCA-550AX versions 1.0.1.21(SP3);OSCA-550X versions 1.0.1.21(SP3).
EPSS: 0.001 (4.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.9 (Low). Vector: CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N.
Affected products
- Huawei Hege-560
- Huawei Hege-560_firmware — versions 1.0.1.21\(sp3\)
- Huawei Hege-570
- Huawei Hege-570_firmware — versions 1.0.1.21\(sp3\)
- Huawei Osca-550
- Huawei Osca-550a
- Huawei Osca-550a_firmware — versions 1.0.1.21\(sp3\)
- Huawei Osca-550ax
- Huawei Osca-550ax_firmware — versions 1.0.1.21\(sp3\)
- Huawei Osca-550_firmware — versions 1.0.1.21\(sp3\)
Weakness classification (CWE)
References
- psirt@huawei.com (x_refsource_MISC, Vendor Advisory)
- psirt@huawei.com (x_refsource_CONFIRM, Not Applicable)
Frequently asked questions
- What is CVE-2020-1879?
- CVE-2020-1879 is a low-severity vulnerability in Huawei Hege-560, classified under Improper Validation of Integrity Check Value. CVSS score: 3.9/10. Published 2020-03-20.
- How severe is CVE-2020-1879?
- Low severity. CVSS v3 base score is 3.9 out of 10.