Medium severity6.8NVD Advisory· Published Feb 18, 2020· Updated Jun 17, 2026

CVE-2020-1842

Description

Huawei HEGE-560 version 1.0.1.20(SP2); OSCA-550 and OSCA-550A version 1.0.0.71(SP1); and OSCA-550AX and OSCA-550X version 1.0.0.71(SP2) have an insufficient authentication vulnerability. An attacker can access the device physically and perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker obtain high privilege.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Huawei/HEGE-560llm-fuzzy2 versions
1.0.1.20(SP2)+ 1 more
- (no CPE)range: 1.0.1.20(SP2)
- (no CPE)range: 1.0.1.20(SP2)
Huawei/OSCA-550llm-fuzzy
Range: 1.0.0.71(SP1)
Huawei/OSCA-550Allm-fuzzy2 versions
1.0.0.71(SP1)+ 1 more
- (no CPE)range: 1.0.0.71(SP1)
- (no CPE)range: 1.0.0.71(SP1)
Huawei/OSCA-550Xllm-fuzzy2 versions
1.0.0.71(SP2)+ 1 more
- (no CPE)range: 1.0.0.71(SP2)
- (no CPE)range: 1.0.0.71(SP2)
Huawei/Hege 560 Firmware
cpe:2.3:o:huawei:hege-560_firmware:1.0.1.20\(sp2\):*:*:*:*:*:*:*
Huawei/Osca 550 Firmware
cpe:2.3:o:huawei:osca-550_firmware:1.0.0.71\(sp1\):*:*:*:*:*:*:*
Huawei/Osca 550a Firmware
cpe:2.3:o:huawei:osca-550a_firmware:1.0.0.71\(sp1\):*:*:*:*:*:*:*
Huawei/Osca 550ax Firmware
cpe:2.3:o:huawei:osca-550ax_firmware:1.0.0.71\(sp2\):*:*:*:*:*:*:*
Huawei/Osca 550x Firmware
cpe:2.3:o:huawei:osca-550x_firmware:1.0.0.71\(sp2\):*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-01-osca-ennvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000