6.1
CVE-2020-1855
- EPSS 0.21%
- Veröffentlicht 18.02.2020 03:15:11
- Zuletzt bearbeitet 21.11.2024 05:11:29
- Erkennungen
Huawei HEGE-570 version 1.0.1.22(SP3); and HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X version 1.0.1.21(SP3) have an insufficient verification vulnerability. An attacker can access the device physically and exploit this vulnerability to tamper with device information. Successful exploit may cause service abnormal.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Hege-560 Firmware Version 1.0.1.21(sp3)
Huawei ≫ Osca-550 Firmware Version 1.0.1.21(sp3)
Huawei ≫ Osca-550a Firmware Version 1.0.1.21(sp3)
Huawei ≫ Osca-550ax Firmware Version 1.0.1.21(sp3)
Huawei ≫ Osca-550x Firmware Version 1.0.1.21(sp3)
Huawei ≫ Hege-570 Firmware Version 1.0.1.22(sp3)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.21% | 0.108 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 6.1 | 0.9 | 5.2 |
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
|
| NIST | 3.6 | 3.9 | 4.9 |
AV:L/AC:L/Au:N/C:N/I:P/A:P
|
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-03-osca-en