Design/Logic Flaw

2020-02-1803:15:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.1%

JSON

Huawei HEGE-570 version 1.0.1.22(SP3); and HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X version 1.0.1.21(SP3) have an insufficient verification vulnerability. An attacker can access the device physically and exploit this vulnerability to tamper with device information. Successful exploit may cause service abnormal.

CPENameOperatorVersion
hege-560_firmwareeq1.0.121-sp3
hege-570_firmwareeq1.0.122-sp3
osca-550_firmwareeq1.0.121-sp3
osca-550a_firmwareeq1.0.121-sp3
osca-550ax_firmwareeq1.0.121-sp3
osca-550x_firmwareeq1.0.121-sp3

Name	Operator	Version
hege-560_firmware	eq	1.0.121-sp3
hege-570_firmware	eq	1.0.122-sp3
osca-550_firmware	eq	1.0.121-sp3
osca-550a_firmware	eq	1.0.121-sp3
osca-550ax_firmware	eq	1.0.121-sp3
osca-550x_firmware	eq	1.0.121-sp3