VULNERABILITY INTELLIGENCE
CVE-2020-1879
CVSS score3.9 LOW
EPSS probability0.15%
CISA KEVNot currently listed
Published2020-03-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Description
There is an improper integrity checking vulnerability on some huawei products. The software of the affected product has an improper integrity check which may allow an attacker with high privilege to make malicious modifications.Affected product versions include:HEGE-560 versions 1.0.1.21(SP3);HEGE-570 versions 1.0.1.22(SP3);OSCA-550 versions 1.0.1.21(SP3);OSCA-550A versions 1.0.1.21(SP3);OSCA-550AX versions 1.0.1.21(SP3);OSCA-550X versions 1.0.1.21(SP3).
Weakness classification
- nvd@nist.gov: CWE-354
Primary references
- psirt@huawei.com — Not Applicable
- psirt@huawei.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Not Applicable
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory