PT-2020-15137 · Hege+1 · Hege-560+3

Published 2020-03-20 · Updated 2023-02-03 · CVE-2020-1879

Positive Technologies (AI Summary)

CVSS v3.1

3.9

Low

Base vector

AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions HEGE-560 version 1.0.1.21(SP3) HEGE-570 version 1.0.1.22(SP3) OSCA-550 version 1.0.1.21(SP3) OSCA-550A version 1.0.1.21(SP3) OSCA-550AX version 1.0.1.21(SP3) OSCA-550X version 1.0.1.21(SP3)

Description The software of the affected products has an improper integrity check which may allow an attacker with high privilege to make malicious modifications.

Recommendations For HEGE-560 version 1.0.1.21(SP3), update to a version that fixes the improper integrity checking issue. For HEGE-570 version 1.0.1.22(SP3), update to a version that fixes the improper integrity checking issue. For OSCA-550 version 1.0.1.21(SP3), update to a version that fixes the improper integrity checking issue. For OSCA-550A version 1.0.1.21(SP3), update to a version that fixes the improper integrity checking issue. For OSCA-550AX version 1.0.1.21(SP3), update to a version that fixes the improper integrity checking issue. For OSCA-550X version 1.0.1.21(SP3), update to a version that fixes the improper integrity checking issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-354

Related Identifiers

CVE-2020-1879

Affected Products

Hege-560

Hege-570

Osca-550

Osca-550A

References · 5

• https://osv.dev/vulnerability/CVE-2020-1879 · Vendor Advisory
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200311-01-integrity-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-1879 · Security Note
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20200415-02-dos-en · Note
• https://t.me/cvenotify/1955 · Telegram Post