VULNERABILITY INTELLIGENCE

CVE-2020-1789

CVSS score6.8 MEDIUM
EPSS probability0.24%
CISA KEVNot currently listed
Published2020-02-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Huawei OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X products with version 1.0.1.21(SP3) have an insufficient authentication vulnerability. The software does not require a strong credential when the user trying to do certain operations. Successful exploit could allow an attacker to pass the authentication and do certain operations by a weak credential.

Weakness classification

  • CWE-287: Improper Authentication

Primary references