VULNERABILITY INTELLIGENCE
CVE-2020-1855
CVSS score6.1 MEDIUM
EPSS probability0.21%
CISA KEVNot currently listed
Published2020-02-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Description
Huawei HEGE-570 version 1.0.1.22(SP3); and HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X version 1.0.1.21(SP3) have an insufficient verification vulnerability. An attacker can access the device physically and exploit this vulnerability to tamper with device information. Successful exploit may cause service abnormal.
Weakness classification
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- psirt@huawei.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory