CVE-2020-1843

Published: Feb 18, 2020Modified: Jun 17, 2026

6.8

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.9 / Impact: 5.9

Source: NVD

Description

Huawei HEGE-560 version 1.0.1.20(SP2), OSCA-550 version 1.0.0.71(SP1), OSCA-550A version 1.0.0.71(SP1), OSCA-550AX version 1.0.0.71(SP2), and OSCA-550X version 1.0.0.71(SP2) have an insufficient verification vulnerability. An attacker can perform specific operations to exploit this vulnerability by physical access methods. Successful exploitation may cause the attacker perform an illegal operation.

Affected (5)

Products: Huawei: Hege 560 Firmware, Osca 550 Firmware, Osca 550a Firmware, Osca 550ax Firmware, Osca 550x Firmware

5 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Hege 560 Firmware	Version 1.0.1.20(sp2)

Running on/with	Platform Versions
Huawei Hege 560	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Osca 550 Firmware	Version 1.0.0.71(sp1)

Running on/with	Platform Versions
Huawei Osca 550	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Osca 550a Firmware	Version 1.0.0.71(sp1)

Running on/with	Platform Versions
Huawei Osca 550a	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Osca 550ax Firmware	Version 1.0.0.71(sp2)

Running on/with	Platform Versions
Huawei Osca 550ax	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Osca 550x Firmware	Version 1.0.0.71(sp2)

Running on/with	Platform Versions
Huawei Osca 550x	All versions

References (2)

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-02-osca-en

Source: psirt@huawei.com

Vendor Advisory

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-02-osca-en

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.