Search
Find a vulnerability
Search criteria
2 vulnerabilities found for OSCA-550, OSCA-550A by Huawei
CVE-2020-1842 (GCVE-0-2020-1842)
Vulnerability from nvd – Published: 2020-02-18 03:03 – Updated: 2024-08-04 06:53
VLAI
EPSS
VEX
Summary
Huawei HEGE-560 version 1.0.1.20(SP2); OSCA-550 and OSCA-550A version 1.0.0.71(SP1); and OSCA-550AX and OSCA-550X version 1.0.0.71(SP2) have an insufficient authentication vulnerability. An attacker can access the device physically and perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker obtain high privilege.
Severity
No CVSS data available.
CWE
- Insufficient Authentication
Assigner
References
1 reference
| URL | Tags |
|---|---|
| http://www.huawei.com/en/psirt/security-advisorie… | x_refsource_CONFIRM |
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| Huawei | HEGE-560 |
Affected:
1.0.1.20(SP2)
|
|
| Huawei | OSCA-550, OSCA-550A |
Affected:
1.0.0.71(SP1)
|
|
| Huawei | OSCA-550AX, OSCA-550X |
Affected:
1.0.0.71(SP2)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T06:53:58.522Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-01-osca-en"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "HEGE-560",
"vendor": "Huawei",
"versions": [
{
"status": "affected",
"version": "1.0.1.20(SP2)"
}
]
},
{
"product": "OSCA-550, OSCA-550A",
"vendor": "Huawei",
"versions": [
{
"status": "affected",
"version": "1.0.0.71(SP1)"
}
]
},
{
"product": "OSCA-550AX, OSCA-550X",
"vendor": "Huawei",
"versions": [
{
"status": "affected",
"version": "1.0.0.71(SP2)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Huawei HEGE-560 version 1.0.1.20(SP2); OSCA-550 and OSCA-550A version 1.0.0.71(SP1); and OSCA-550AX and OSCA-550X version 1.0.0.71(SP2) have an insufficient authentication vulnerability. An attacker can access the device physically and perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker obtain high privilege."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Insufficient Authentication",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-02-18T03:03:52.000Z",
"orgId": "25ac1063-e409-4190-8079-24548c77ea2e",
"shortName": "huawei"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-01-osca-en"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@huawei.com",
"ID": "CVE-2020-1842",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "HEGE-560",
"version": {
"version_data": [
{
"version_value": "1.0.1.20(SP2)"
}
]
}
},
{
"product_name": "OSCA-550, OSCA-550A",
"version": {
"version_data": [
{
"version_value": "1.0.0.71(SP1)"
}
]
}
},
{
"product_name": "OSCA-550AX, OSCA-550X",
"version": {
"version_data": [
{
"version_value": "1.0.0.71(SP2)"
}
]
}
}
]
},
"vendor_name": "Huawei"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Huawei HEGE-560 version 1.0.1.20(SP2); OSCA-550 and OSCA-550A version 1.0.0.71(SP1); and OSCA-550AX and OSCA-550X version 1.0.0.71(SP2) have an insufficient authentication vulnerability. An attacker can access the device physically and perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker obtain high privilege."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Insufficient Authentication"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-01-osca-en",
"refsource": "CONFIRM",
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-01-osca-en"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "25ac1063-e409-4190-8079-24548c77ea2e",
"assignerShortName": "huawei",
"cveId": "CVE-2020-1842",
"datePublished": "2020-02-18T03:03:52.000Z",
"dateReserved": "2019-11-29T00:00:00.000Z",
"dateUpdated": "2024-08-04T06:53:58.522Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2020-1842 (GCVE-0-2020-1842)
Vulnerability from cvelistv5 – Published: 2020-02-18 03:03 – Updated: 2024-08-04 06:53
VLAI
EPSS
VEX
Summary
Huawei HEGE-560 version 1.0.1.20(SP2); OSCA-550 and OSCA-550A version 1.0.0.71(SP1); and OSCA-550AX and OSCA-550X version 1.0.0.71(SP2) have an insufficient authentication vulnerability. An attacker can access the device physically and perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker obtain high privilege.
Severity
No CVSS data available.
CWE
- Insufficient Authentication
Assigner
References
1 reference
| URL | Tags |
|---|---|
| http://www.huawei.com/en/psirt/security-advisorie… | x_refsource_CONFIRM |
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| Huawei | HEGE-560 |
Affected:
1.0.1.20(SP2)
|
|
| Huawei | OSCA-550, OSCA-550A |
Affected:
1.0.0.71(SP1)
|
|
| Huawei | OSCA-550AX, OSCA-550X |
Affected:
1.0.0.71(SP2)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T06:53:58.522Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-01-osca-en"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "HEGE-560",
"vendor": "Huawei",
"versions": [
{
"status": "affected",
"version": "1.0.1.20(SP2)"
}
]
},
{
"product": "OSCA-550, OSCA-550A",
"vendor": "Huawei",
"versions": [
{
"status": "affected",
"version": "1.0.0.71(SP1)"
}
]
},
{
"product": "OSCA-550AX, OSCA-550X",
"vendor": "Huawei",
"versions": [
{
"status": "affected",
"version": "1.0.0.71(SP2)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Huawei HEGE-560 version 1.0.1.20(SP2); OSCA-550 and OSCA-550A version 1.0.0.71(SP1); and OSCA-550AX and OSCA-550X version 1.0.0.71(SP2) have an insufficient authentication vulnerability. An attacker can access the device physically and perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker obtain high privilege."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Insufficient Authentication",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-02-18T03:03:52.000Z",
"orgId": "25ac1063-e409-4190-8079-24548c77ea2e",
"shortName": "huawei"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-01-osca-en"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@huawei.com",
"ID": "CVE-2020-1842",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "HEGE-560",
"version": {
"version_data": [
{
"version_value": "1.0.1.20(SP2)"
}
]
}
},
{
"product_name": "OSCA-550, OSCA-550A",
"version": {
"version_data": [
{
"version_value": "1.0.0.71(SP1)"
}
]
}
},
{
"product_name": "OSCA-550AX, OSCA-550X",
"version": {
"version_data": [
{
"version_value": "1.0.0.71(SP2)"
}
]
}
}
]
},
"vendor_name": "Huawei"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Huawei HEGE-560 version 1.0.1.20(SP2); OSCA-550 and OSCA-550A version 1.0.0.71(SP1); and OSCA-550AX and OSCA-550X version 1.0.0.71(SP2) have an insufficient authentication vulnerability. An attacker can access the device physically and perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker obtain high privilege."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Insufficient Authentication"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-01-osca-en",
"refsource": "CONFIRM",
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-01-osca-en"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "25ac1063-e409-4190-8079-24548c77ea2e",
"assignerShortName": "huawei",
"cveId": "CVE-2020-1842",
"datePublished": "2020-02-18T03:03:52.000Z",
"dateReserved": "2019-11-29T00:00:00.000Z",
"dateUpdated": "2024-08-04T06:53:58.522Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}