CVE-2020-1879

Katalog CVE

CVSS 3.9 · Low EPSS 0,15%

Kerentanan Improper Validation of Integrity Check Value pada huawei hege-560 firmware, huawei hege-570 firmware +4 lainnya. Skor CVSS 3.1 3.9 (Low) menurut NVD.

Deskripsi (NVD)

There is an improper integrity checking vulnerability on some huawei products. The software of the affected product has an improper integrity check which may allow an attacker with high privilege to make malicious modifications.Affected product versions include:HEGE-560 versions 1.0.1.21(SP3);HEGE-570 versions 1.0.1.22(SP3);OSCA-550 versions 1.0.1.21(SP3);OSCA-550A versions 1.0.1.21(SP3);OSCA-550AX versions 1.0.1.21(SP3);OSCA-550X versions 1.0.1.21(SP3).

Rincian

Terbit di NVD

20 Maret 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.9 (Low), sumber NVD
CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-354: Improper Validation of Integrity Check Value

EPSS (30 hari)

0,15% peluang dieksploitasi; lebih tinggi dari 3,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200311-01-integrity-en advisory vendor
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-02-dos-en not applicable