6.1
CVE-2020-1855
- EPSS 0.06%
- Published 18.02.2020 03:15:11
- Last modified 21.11.2024 05:11:29
- Source psirt@huawei.com
- Teams watchlist Login
- Open Login
Huawei HEGE-570 version 1.0.1.22(SP3); and HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X version 1.0.1.21(SP3) have an insufficient verification vulnerability. An attacker can access the device physically and exploit this vulnerability to tamper with device information. Successful exploit may cause service abnormal.
Data is provided by the National Vulnerability Database (NVD)
Huawei ≫ Hege-560 Firmware Version1.0.1.21(sp3)
Huawei ≫ Osca-550 Firmware Version1.0.1.21(sp3)
Huawei ≫ Osca-550a Firmware Version1.0.1.21(sp3)
Huawei ≫ Osca-550ax Firmware Version1.0.1.21(sp3)
Huawei ≫ Osca-550x Firmware Version1.0.1.21(sp3)
Huawei ≫ Hege-570 Firmware Version1.0.1.22(sp3)
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.06% | 0.189 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 6.1 | 0.9 | 5.2 |
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
|
| nvd@nist.gov | 3.6 | 3.9 | 4.9 |
AV:L/AC:L/Au:N/C:N/I:P/A:P
|