medium6.8
CVE-2020-1789
Huawei OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X products with version 1.0.1.21(SP3) have an insufficient authentication vulnerability.
Impact
Huawei OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X products with version 1.0.1.21(SP3) have an insufficient authentication vulnerability. The software does not require a strong credential when the user trying to do certain operations. Successful exploit could allow an attacker to pass the authentication and do certain operations by a weak credential.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Osca-550 Firmware | Version 1.0.1.21\(sp3\) |
| Huawei | Osca-550a Firmware | Version 1.0.1.21\(sp3\) |
| Huawei | Osca-550ax Firmware | Version 1.0.1.21\(sp3\) |
| Huawei | Osca-550x Firmware | Version 1.0.1.21\(sp3\) |