{"affected":[{"affectedData":[{"product":"HEGE-570","vendor":"Huawei","versions":[{"status":"affected","version":"1.0.1.22(SP3)"}]},{"product":"HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, OSCA-550X","vendor":"Huawei","versions":[{"status":"affected","version":"1.0.1.21(SP3)"}]}],"source":"psirt@huawei.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:huawei:hege-560_firmware:1.0.1.21\\(sp3\\):*:*:*:*:*:*:*","matchCriteriaId":"6C033281-C8B1-48AF-A8E8-30863E778C10","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:huawei:hege-560:-:*:*:*:*:*:*:*","matchCriteriaId":"3325D5D9-8956-4335-B616-C553BF885152","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:huawei:osca-550_firmware:1.0.1.21\\(sp3\\):*:*:*:*:*:*:*","matchCriteriaId":"5785116E-F7CF-49BA-8833-98913F81630C","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:huawei:osca-550:-:*:*:*:*:*:*:*","matchCriteriaId":"C0D0122F-89FF-4B3E-8837-2E07A0D27105","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:huawei:osca-550a_firmware:1.0.1.21\\(sp3\\):*:*:*:*:*:*:*","matchCriteriaId":"B2A17B82-6007-416F-8EB8-19A73EDEF52B","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:huawei:osca-550a:-:*:*:*:*:*:*:*","matchCriteriaId":"5D4E574D-DEFF-48CC-81F0-28DB6432EF13","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:huawei:osca-550ax_firmware:1.0.1.21\\(sp3\\):*:*:*:*:*:*:*","matchCriteriaId":"EAFE434F-2C9A-4B04-A916-0E9BBB940EDF","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:huawei:osca-550ax:-:*:*:*:*:*:*:*","matchCriteriaId":"62EEE25C-2FA4-4B64-9680-387380D97352","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:huawei:osca-550x_firmware:1.0.1.21\\(sp3\\):*:*:*:*:*:*:*","matchCriteriaId":"42AD7C07-1559-45F3-A364-1F9AB8D0B4E7","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:huawei:osca-550x:-:*:*:*:*:*:*:*","matchCriteriaId":"565AF527-86EF-4314-A645-B99D0C4C62C2","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:huawei:hege-570_firmware:1.0.1.22\\(sp3\\):*:*:*:*:*:*:*","matchCriteriaId":"D18EA69A-0C72-487C-92A3-9F622FAB2C51","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:huawei:hege-570:-:*:*:*:*:*:*:*","matchCriteriaId":"35F5ADA7-C184-47D2-BD05-029162462E1A","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Huawei HEGE-570 version 1.0.1.22(SP3); and HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X version 1.0.1.21(SP3) have an insufficient verification vulnerability. An attacker can access the device physically and exploit this vulnerability to tamper with device information. Successful exploit may cause service abnormal."},{"lang":"es","value":"Huawei HEGE-570 versión 1.0.1.22(SP3); y HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX y OSCA-550X versión 1.0.1.21(SP3), presentan una vulnerabilidad de comprobación insuficiente. Un atacante puede acceder al dispositivo físicamente y explotar esta vulnerabilidad para dañar la información del dispositivo. Una explotación con éxito puede causar un servicio anormal."}],"id":"CVE-2020-1855","lastModified":"2026-06-17T03:02:30.440","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":3.6,"confidentialityImpact":"NONE","integrityImpact":"PARTIAL","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:P","version":"2.0"},"exploitabilityScore":3.9,"impactScore":4.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"PHYSICAL","availabilityImpact":"HIGH","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","version":"3.1"},"exploitabilityScore":0.9,"impactScore":5.2,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-02-18T03:15:11.277","references":[{"source":"psirt@huawei.com","tags":["Vendor Advisory"],"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-03-osca-en"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-03-osca-en"}],"sourceIdentifier":"psirt@huawei.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}