Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveHuaweiCVE-2020-1802
HistoryApr 10, 2020 - 2:15 p.m.

CVE-2020-1802

2020-04-1014:15:11
CWE-354
huawei
web.nvd.nist.gov
91
cve-2020-1802
vulnerability
integrity validation
file loading
exploit
usb
osca-550
osca-550a
osca-550ax
osca-550x
nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

CVSS3

4.6

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

4.6

Confidence

High

EPSS

0.001

Percentile

25.0%

JSON

There is an insufficient integrity validation vulnerability in several products. The device does not sufficiently validate the integrity of certain file in certain loading processes, successful exploit could allow the attacker to load a crafted file to the device through USB.Affected product versions include:OSCA-550 versions 1.0.1.23(SP2);OSCA-550A versions 1.0.1.23(SP2);OSCA-550AX versions 1.0.1.23(SP2);OSCA-550X versions 1.0.1.23(SP2).

Affected configurations

Nvd
Vulners
Node
huaweiosca-550Match-
AND
huaweiosca-550_firmwareMatch1.0.1.23\(sp2\)
Node
huaweiosca-550aMatch-
AND
huaweiosca-550a_firmwareMatch1.0.1.23\(sp2\)
Node
huaweiosca-550axMatch-
AND
huaweiosca-550ax_firmwareMatch1.0.1.23\(sp2\)
Node
huaweiosca-550xMatch-
AND
huaweiosca-550x_firmwareMatch1.0.1.23\(sp2\)
VendorProductVersionCPE
huaweiosca-550-cpe:2.3:h:huawei:osca-550:-:*:*:*:*:*:*:*
huaweiosca-550_firmware1.0.1.23(sp2)cpe:2.3:o:huawei:osca-550_firmware:1.0.1.23\(sp2\):*:*:*:*:*:*:*
huaweiosca-550a-cpe:2.3:h:huawei:osca-550a:-:*:*:*:*:*:*:*
huaweiosca-550a_firmware1.0.1.23(sp2)cpe:2.3:o:huawei:osca-550a_firmware:1.0.1.23\(sp2\):*:*:*:*:*:*:*
huaweiosca-550ax-cpe:2.3:h:huawei:osca-550ax:-:*:*:*:*:*:*:*
huaweiosca-550ax_firmware1.0.1.23(sp2)cpe:2.3:o:huawei:osca-550ax_firmware:1.0.1.23\(sp2\):*:*:*:*:*:*:*
huaweiosca-550x-cpe:2.3:h:huawei:osca-550x:-:*:*:*:*:*:*:*
huaweiosca-550x_firmware1.0.1.23(sp2)cpe:2.3:o:huawei:osca-550x_firmware:1.0.1.23\(sp2\):*:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "OSCA-550;OSCA-550A;OSCA-550AX;OSCA-550X",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.1.23(SP2)"
      }
    ]
  }
]

Related

cvelist 1
nvd 1
prion 1
huawei 1
cvelist
cvelist
CVE-2020-1802
2020-04-10 13:59:56
nvd
nvd
CVE-2020-1802
2020-04-10 14:15:11
prion
prion
Input validation
2020-04-10 14:15:00
huawei
huawei
Security Advisory - Insufficient Integrity Validation Vulnerability in Several Products
2020-04-08 00:00:00

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

CVSS3

4.6

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

4.6

Confidence

High

EPSS

0.001

Percentile

25.0%

JSON
Related for CVE-2020-1802
cvelist1nvd1prion1huawei1