CVE-2020-1789

published 2020-02-18

CVE-2020-1789: Huawei OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X products with version 1.0.1.21(SP3) have an insufficient authentication vulnerability. The software does…

medium 6.8 CVSS 3.1

AV P AC L PR N UI N S U C H I H A H

Huawei OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X products with version 1.0.1.21(SP3) have an insufficient authentication vulnerability. The software does not require a strong credential when the user trying to do certain operations. Successful exploit could allow an attacker to pass the authentication and do certain operations by a weak credential.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
huawei	osca-550_firmware	—	—
huawei	osca-550a_firmware	—	—
huawei	osca-550ax_firmware	—	—
huawei	osca-550x_firmware	—	—

CWE-287