SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2020-1843

Huawei HEGE-560 version 1.0.1.20(SP2), OSCA-550 version 1.0.0.71(SP1), OSCA-550A version 1.0.0.71(SP1), OSCA-550AX version 1.0.0.71(SP2), and OSCA-550X version 1.0.0.71(SP2) have an insufficient verification vulnerability.

MEDIUM 6.8EPSS 0.23%

Does this matter?

Lower severity and a low EPSS score (0.23%). Track it; it rarely justifies an emergency change on its own.

Description

Huawei HEGE-560 version 1.0.1.20(SP2), OSCA-550 version 1.0.0.71(SP1), OSCA-550A version 1.0.0.71(SP1), OSCA-550AX version 1.0.0.71(SP2), and OSCA-550X version 1.0.0.71(SP2) have an insufficient verification vulnerability. An attacker can perform specific operations to exploit this vulnerability by physical access methods. Successful exploitation may cause the attacker perform an illegal operation.

CVSS 3.1
6.8 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.23% probability · 14th percentile
CISA KEV
Not listed
Affected
huawei/hege-560 firmware · huawei/osca-550 firmware · huawei/osca-550a firmware · huawei/osca-550ax firmware · huawei/osca-550x firmware
Source
psirt@huawei.com

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.