CVE-2020-1879

published 2020-03-20

CVE-2020-1879: There is an improper integrity checking vulnerability on some huawei products. The software of the affected product has an improper integrity check which may…

Priority P4 11 low 3.9 CVSS 3.1

AV P AC L PR H UI N S U C N I H A N

There is an improper integrity checking vulnerability on some huawei products. The software of the affected product has an improper integrity check which may allow an attacker with high privilege to make malicious modifications.Affected product versions include:HEGE-560 versions 1.0.1.21(SP3);HEGE-570 versions 1.0.1.22(SP3);OSCA-550 versions 1.0.1.21(SP3);OSCA-550A versions 1.0.1.21(SP3);OSCA-550AX versions 1.0.1.21(SP3);OSCA-550X versions 1.0.1.21(SP3).

Affected

6 ranges

Vendor	Product	Version range	Fixed in
huawei	hege-560_firmware	—	—
huawei	hege-570_firmware	—	—
huawei	osca-550_firmware	—	—
huawei	osca-550a_firmware	—	—
huawei	osca-550ax_firmware	—	—
huawei	osca-550x_firmware	—	—

CVSS provenance

nvd v3.1 3.9 LOW CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

nvd v2.0 3.6 LOW AV:L/AC:L/Au:N/C:N/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-354