Huawei Osca-550x Firmware vulnerabilities

6 CVEs affecting Huawei Osca-550x Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-1802, published 2020-04-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-1789, published 2020-02-18. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. Huawei OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X products with version 1.0.1.21(SP3) have an insufficient authentication vulnerability. The software does not require a strong credential when the…
CVE-2020-1842, published 2020-02-18. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. Huawei HEGE-560 version 1.0.1.20(SP2); OSCA-550 and OSCA-550A version 1.0.0.71(SP1); and OSCA-550AX and OSCA-550X version 1.0.0.71(SP2) have an insufficient authentication vulnerability. An attacker…
CVE-2020-1843, published 2020-02-18. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. Huawei HEGE-560 version 1.0.1.20(SP2), OSCA-550 version 1.0.0.71(SP1), OSCA-550A version 1.0.0.71(SP1), OSCA-550AX version 1.0.0.71(SP2), and OSCA-550X version 1.0.0.71(SP2) have an insufficient…
CVE-2020-1855, published 2020-02-18. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. Huawei HEGE-570 version 1.0.1.22(SP3); and HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X version 1.0.1.21(SP3) have an insufficient verification vulnerability. An attacker can access the…
CVE-2020-1802, published 2020-04-10. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. There is an insufficient integrity validation vulnerability in several products. The device does not sufficiently validate the integrity of certain file in certain loading processes, successful…
CVE-2020-1879, published 2020-03-20. Low severity, CVSS 3.9. EPSS: 0.1% chance of exploitation in the next 30 days. There is an improper integrity checking vulnerability on some huawei products. The software of the affected product has an improper integrity check which may allow an attacker with high privilege to…