CVE-2020-1789

2020-02-1802:50:43

huawei

www.cve.org

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.3%

JSON

Huawei OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X products with version 1.0.1.21(SP3) have an insufficient authentication vulnerability. The software does not require a strong credential when the user trying to do certain operations. Successful exploit could allow an attacker to pass the authentication and do certain operations by a weak credential.

CNA Affected

[
  {
    "product": "OSCA-550, OSCA-550A, OSCA-550AX, OSCA-550X",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.1.21(SP3)"
      }
    ]
  }
]