CVE-2020-1879 - There is an improper integrity checking vulnerability on some huawei products

Back Back to CVE browser

LOW

There is an improper integrity checking vulnerability on some huawei products

Published Mar 20, 2020

3.9

LOW

CVSS 3.1

EPSS 0.15%

Description

There is an improper integrity checking vulnerability on some huawei products. The software of the affected product has an improper integrity check which may allow an attacker with high privilege to make malicious modifications.Affected product versions include:HEGE-560 versions 1.0.1.21(SP3);HEGE-570 versions 1.0.1.22(SP3);OSCA-550 versions 1.0.1.21(SP3);OSCA-550A versions 1.0.1.21(SP3);OSCA-550AX versions 1.0.1.21(SP3);OSCA-550X versions 1.0.1.21(SP3).

Affected products

Vendor n/a Product Hege-560;hege-570;osca-550;osca-550a;osca-550ax;osca-550x Default
n/a
- Version
  1.0.1.21(SP3)
  Status
  affected
  Constraints
  -
- Version
  1.0.1.22(SP3)
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Hege-560;hege-570;osca-550;osca-550a;osca-550ax;osca-550x

n/a

Version	Status	Constraints
1.0.1.21(SP3)	affected	-
1.0.1.22(SP3)	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-354

References (3)

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-02-dos-en
x_refsource_CONFIRMNot Applicable
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-12705
Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200311-01-integrity-en
x_refsource_MISCVendor Advisory

Link	Providers	Tags
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-02-dos-en		x_refsource_CONFIRMNot Applicable
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-12705		Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200311-01-integrity-en		x_refsource_MISCVendor Advisory