PT-2020-15116 · Huawei · Hege-560+2

Published 2020-02-18 · Updated 2021-07-21 · CVE-2020-1843

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Huawei HEGE-560 version 1.0.1.20(SP2) OSCA-550 version 1.0.0.71(SP1) OSCA-550A version 1.0.0.71(SP1) OSCA-550AX version 1.0.0.71(SP2) OSCA-550X version 1.0.0.71(SP2)

Description The issue is related to insufficient verification, allowing an attacker to exploit it through physical access methods. By performing specific operations, an attacker may successfully exploit this issue, potentially enabling them to perform illegal operations.

Recommendations For Huawei HEGE-560 version 1.0.1.20(SP2), update to a version that addresses the insufficient verification vulnerability. For OSCA-550 version 1.0.0.71(SP1), update to a version that addresses the insufficient verification vulnerability. For OSCA-550A version 1.0.0.71(SP1), update to a version that addresses the insufficient verification vulnerability. For OSCA-550AX version 1.0.0.71(SP2), update to a version that addresses the insufficient verification vulnerability. For OSCA-550X version 1.0.0.71(SP2), update to a version that addresses the insufficient verification vulnerability.

Fix

Related Identifiers

CVE-2020-1843

Affected Products

Hege-560

Osca-550

Osca-550A

References · 3

• https://osv.dev/vulnerability/CVE-2020-1843 · Vendor Advisory
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20200122-02-osca-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-1843 · Security Note