PT-2020-15122
CVE-2020-1855
·
تاريخ النشر
2020-02-18
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Huawei HEGE-570 version 1.0.1.22(SP3)
Huawei HEGE-560 version 1.0.1.21(SP3)
Huawei OSCA-550 version 1.0.1.21(SP3)
Huawei OSCA-550A version 1.0.1.21(SP3)
Huawei OSCA-550AX version 1.0.1.21(SP3)
Huawei OSCA-550X version 1.0.1.21(SP3)
Description
The issue is related to insufficient verification, allowing an attacker with physical access to the device to exploit the vulnerability and tamper with device information. This could result in service abnormalities.
Recommendations
For Huawei HEGE-570 version 1.0.1.22(SP3), update to a version that addresses the insufficient verification vulnerability.
For Huawei HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X version 1.0.1.21(SP3), update to a version that addresses the insufficient verification vulnerability.
As a temporary workaround, consider restricting physical access to the devices until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾