{"containers": {"cna": {"affected": [{"product": "HEGE-560", "vendor": "Huawei", "versions": [{"status": "affected", "version": "1.0.1.20(SP2)"}]}, {"product": "OSCA-550, OSCA-550A", "vendor": "Huawei", "versions": [{"status": "affected", "version": "1.0.0.71(SP1)"}]}, {"product": "OSCA-550AX, OSCA-550X", "vendor": "Huawei", "versions": [{"status": "affected", "version": "1.0.0.71(SP2)"}]}], "descriptions": [{"lang": "en", "value": "Huawei HEGE-560 version 1.0.1.20(SP2); OSCA-550 and OSCA-550A version 1.0.0.71(SP1); and OSCA-550AX and OSCA-550X version 1.0.0.71(SP2) have an insufficient authentication vulnerability. An attacker can access the device physically and perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker obtain high privilege."}], "problemTypes": [{"descriptions": [{"description": "Insufficient Authentication", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-02-18T03:03:52", "orgId": "25ac1063-e409-4190-8079-24548c77ea2e", "shortName": "huawei"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-01-osca-en"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@huawei.com", "ID": "CVE-2020-1842", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "HEGE-560", "version": {"version_data": [{"version_value": "1.0.1.20(SP2)"}]}}, {"product_name": "OSCA-550, OSCA-550A", "version": {"version_data": [{"version_value": "1.0.0.71(SP1)"}]}}, {"product_name": "OSCA-550AX, OSCA-550X", "version": {"version_data": [{"version_value": "1.0.0.71(SP2)"}]}}]}, "vendor_name": "Huawei"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Huawei HEGE-560 version 1.0.1.20(SP2); OSCA-550 and OSCA-550A version 1.0.0.71(SP1); and OSCA-550AX and OSCA-550X version 1.0.0.71(SP2) have an insufficient authentication vulnerability. An attacker can access the device physically and perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker obtain high privilege."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Insufficient Authentication"}]}]}, "references": {"reference_data": [{"name": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-01-osca-en", "refsource": "CONFIRM", "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-01-osca-en"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T06:53:58.522Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-01-osca-en"}]}]}, "cveMetadata": {"assignerOrgId": "25ac1063-e409-4190-8079-24548c77ea2e", "assignerShortName": "huawei", "cveId": "CVE-2020-1842", "datePublished": "2020-02-18T03:03:52", "dateReserved": "2019-11-29T00:00:00", "dateUpdated": "2024-08-04T06:53:58.522Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:huawei:hege-560_firmware:1.0.1.20\\(sp2\\):*:*:*:*:*:*:*", "matchCriteriaId": "65CC8631-B76A-4EBC-AA9C-D53FB1D256CE", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:huawei:hege-560:-:*:*:*:*:*:*:*", "matchCriteriaId": "3325D5D9-8956-4335-B616-C553BF885152", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:huawei:osca-550_firmware:1.0.0.71\\(sp1\\):*:*:*:*:*:*:*", "matchCriteriaId": "8FBE7C39-A376-4C6C-A8BB-A27AFC54770B", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:huawei:osca-550:-:*:*:*:*:*:*:*", "matchCriteriaId": "C0D0122F-89FF-4B3E-8837-2E07A0D27105", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:huawei:osca-550a_firmware:1.0.0.71\\(sp1\\):*:*:*:*:*:*:*", "matchCriteriaId": "665F1A21-5F7A-49CD-9051-53BCB06993B7", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:huawei:osca-550a:-:*:*:*:*:*:*:*", "matchCriteriaId": "5D4E574D-DEFF-48CC-81F0-28DB6432EF13", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:huawei:osca-550ax_firmware:1.0.0.71\\(sp2\\):*:*:*:*:*:*:*", "matchCriteriaId": "8ADA1B36-992F-44A5-A5AE-FD9AC7772D0A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:huawei:osca-550ax:-:*:*:*:*:*:*:*", "matchCriteriaId": "62EEE25C-2FA4-4B64-9680-387380D97352", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:huawei:osca-550x_firmware:1.0.0.71\\(sp2\\):*:*:*:*:*:*:*", "matchCriteriaId": "91C579FB-2CBB-4836-A7A6-C06131B2DB15", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:huawei:osca-550x:-:*:*:*:*:*:*:*", "matchCriteriaId": "565AF527-86EF-4314-A645-B99D0C4C62C2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Huawei HEGE-560 version 1.0.1.20(SP2); OSCA-550 and OSCA-550A version 1.0.0.71(SP1); and OSCA-550AX and OSCA-550X version 1.0.0.71(SP2) have an insufficient authentication vulnerability. An attacker can access the device physically and perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker obtain high privilege."}, {"lang": "es", "value": "Huawei HEGE-560 versi\u00f3n 1.0.1.20(SP2); OSCA-550 y OSCA-550A versi\u00f3n 1.0.0.71(SP1); y OSCA-550AX y OSCA-550X versi\u00f3n 1.0.0.71(SP2), presentan una vulnerabilidad de autenticaci\u00f3n insuficiente. Un atacante puede acceder al dispositivo f\u00edsicamente y llevar a cabo operaciones espec\u00edficas para explotar esta vulnerabilidad. Una explotaci\u00f3n con \u00e9xito puede causar que el atacante obtenga privilegios altos."}], "id": "CVE-2020-1842", "lastModified": "2024-11-21T05:11:28.567", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "HIGH", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-02-18T04:15:14.507", "references": [{"source": "psirt@huawei.com", "tags": ["Vendor Advisory"], "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-01-osca-en"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-01-osca-en"}], "sourceIdentifier": "psirt@huawei.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}