Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
yst Notes: - CVE Program Container: References: - https://otrs.com/release-notes/otrs-security-advisory-2020-06/ - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html - https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html
CVE ID: CVE-2020-1770 State: PUBLISHED Published: 2020-03-27T12:47:49.421305Z Last Updated: 2024-09-17T01:11:13.158Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N) Vendors: OTRS AG Products: ((OTRS)) Community Edition, OTRS Problem Types: CWE-201 Description: Support bundle generated files could contain sensitive information that might be unwanted to be disclosed. This issue affects: ((OTRS)) Community Edition: 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://otrs.com/release-notes/otrs-security-advisory-2020-07/ - http://lists.opensuse.org/opensuse-security-a
rences: - https://otrs.com/release-notes/otrs-security-advisory-2020-07/ - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html - https://lists.debian.org/debian-lts-announce/2020/05/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html - https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html
CVE ID: CVE-2020-1771 State: PUBLISHED Published: 2020-03-27T12:47:49.462891Z Last Updated: 2024-09-17T03:28:52.085Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: OTRS AG Products: ((OTRS)) Community Edition, OTRS Problem Types: CWE-79 Description: Attacker is able craft an article with a link to the customer address book with malicious content (JavaScript). When agent opens the link, JavaScript code is executed due to the missing parameter encoding. This issue affects: ((OTRS)) Community Edition: 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://otrs.com/release-notes/otrs-
nd prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://otrs.com/release-notes/otrs-security-advisory-2020-08/ - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html - https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html
CVE ID: CVE-2020-1772 State: PUBLISHED Published: 2020-03-27T12:47:49.502529Z Last Updated: 2024-09-16T23:25:42.434Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: OTRS AG Products: ((OTRS)) Community Edition, OTRS Problem Types: CWE-155 Description: It's possible to craft Lost Password requests with wildcards in the Token value, which allows attacker to retrieve valid Token(s), generated by users which already requested new passwords. This issue affects: ((OTRS)) Community Edition 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://otrs.com/release-n
: 7.0.15 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://otrs.com/release-notes/otrs-security-advisory-2020-09/ - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html - https://lists.debian.org/debian-lts-announce/2020/05/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html - https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html
CVE ID: CVE-2020-1773 State: PUBLISHED Published: 2020-03-27T12:47:49.545851Z Last Updated: 2024-09-16T23:27:05.434Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: OTRS AG Products: ((OTRS)) Community Edition, OTRS Problem Types: CWE-331 Description: An attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or by exploiting OSA-2020-09, may be able to predict other users session IDs, password reset tokens and automatically generated passwords. This issue affects ((OTRS)) Community Edition: 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS; 7.0.15 and prior versions. Additional Analyst Notes: -
tion: 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS; 7.0.15 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://otrs.com/release-notes/otrs-security-advisory-2020-10/ - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html - https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html
CVE ID: CVE-2020-1774 State: PUBLISHED Published: 2020-04-28T13:54:26.180850Z Last Updated: 2024-09-16T18:13:37.691Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N) Vendors: OTRS AG Products: ((OTRS)) Community Edition, OTRS Problem Types: CWE-201 Description: When user downloads PGP or S/MIME keys/certificates, exported file has same name for private and public keys. Therefore it's possible to mix them and to send private key to the third-party instead of public key. This issue affects ((OTRS)) Community Edition: 5.0.42 and prior versions, 6.0.27 and prior versions. OTRS: 7.0.16 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - htt
nd prior versions. OTRS: 7.0.16 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://otrs.com/release-notes/otrs-security-advisory-2020-11/ - https://lists.debian.org/debian-lts-announce/2020/05/msg00000.html - https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html
CVE ID: CVE-2020-1775 State: PUBLISHED Published: 2020-06-08T15:29:40.513794Z Last Updated: 2024-09-16T22:30:23.236Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: OTRS AG Products: OTRS Problem Types: CWE-200 Description: BCC recipients in mails sent from OTRS are visible in article detail on external interface. This issue affects OTRS: 8.0.3 and prior versions, 7.0.17 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://otrs.com/release-notes/otrs-security-advisory-2020-12/
CVE ID: CVE-2020-1776 State: PUBLISHED Published: 2020-07-20T21:04:19.291845Z Last Updated: 2024-09-17T00:26:58.722Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: OTRS AG Products: ((OTRS)) Community Edition, OTRS Problem Types: CWE-613 Description: When an agent user is renamed or set to invalid the session belonging to the user is keept active. The session can not be used to access ticket data in the case the agent is invalid. This issue affects ((OTRS)) Community Edition: 6.0.28 and prior versions. OTRS: 7.0.18 and prior versions, 8.0.4. and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://otrs.com/release-notes/otrs
and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://otrs.com/release-notes/otrs-security-advisory-2020-13/ - https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html
CVE ID: CVE-2020-1777 State: PUBLISHED Published: 2020-10-15T18:52:13.636983Z Last Updated: 2024-09-17T01:16:05.690Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: OTRS AG Products: OTRS Problem Types: CWE-200 Description: Agent names that participates in a chat conversation are revealed in certain parts of the external interface as well as in chat transcriptions inside the tickets, when system is configured to mask real agent names. This issue affects OTRS; 7.0.21 and prior versions, 8.0.6 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://otrs.com/release-notes/otrs-security-advisory-2020-15/
CVE ID: CVE-2020-1778 State: PUBLISHED Published: 2020-11-23T15:32:46.740926Z Last Updated: 2024-09-16T23:40:42.844Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: OTRS AG Products: OTRS Problem Types: CWE-287 Description: When OTRS uses multiple backends for user authentication (with LDAP), agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://otrs.com/release-notes/otrs-security-advisory-2020-16/
CVE ID: CVE-2020-1779 State: PUBLISHED Published: 2021-02-08T10:55:18.477404Z Last Updated: 2024-09-16T17:15:28.699Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N) Vendors: OTRS AG Products: OTRSTicketForms Problem Types: CWE-200 Description: When dynamic templates are used (OTRSTicketForms), admin can use OTRS tags which are not masked properly and can reveal sensitive information. This issue affects: OTRS AG OTRSTicketForms 6.0.x version 6.0.40 and prior versions; 7.0.x version 7.0.29 and prior versions; 8.0.x version 8.0.3 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://otrs.com/release-notes/otrs-security-advisory-202
ditional Analyst Notes: - CVE Program Container: References: - https://otrs.com/release-notes/otrs-security-advisory-2020-17/
CVE ID: CVE-2020-1785 State: PUBLISHED Published: 2020-01-03T14:45:04 Last Updated: 2024-08-04T06:46:30.921Z Vendors: n/a Products: Mate 10 Pro;Honor V10;Honor 10;Nova 4 Problem Types: Denial of Service Description: Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability. The system does not properly check the status of certain module during certain operations, an attacker should trick the user into installing a malicious application, successful exploit could cause reboot of the smartphone. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200102-03-smartphone-en
CVE ID: CVE-2020-1786 State: PUBLISHED Published: 2020-01-09T17:13:18 Last Updated: 2024-08-04T06:46:30.952Z Vendors: Huawei Products: HUAWEI Mate 20 Pro Problem Types: Improper Authentication Description: HUAWEI Mate 20 Pro smartphones versions earlier than 10.0.0.175(C00E69R3P8) have an improper authentication vulnerability. The software does not sufficiently validate the name of apk file in a special condition which could allow an attacker to forge a crafted application as a normal one. Successful exploit could allow the attacker to bypass digital balance function. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-s
ional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-01-smartphone-en
CVE ID: CVE-2020-1787 State: PUBLISHED Published: 2020-01-09T16:44:29 Last Updated: 2024-08-04T06:46:30.893Z Vendors: Huawei Products: HUAWEI Mate 20 Problem Types: Improper Authentication Description: HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139(C00E133R3P1) have an improper authentication vulnerability. The system has a logic error under certain scenario, successful exploit could allow the attacker who gains the privilege of guest user to access to the host user's desktop in an instant, without unlocking the screen lock of the host user. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-02-s
otes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-02-smartphone-en
CVE ID: CVE-2020-1788 State: PUBLISHED Published: 2020-01-21T22:49:53 Last Updated: 2024-08-04T06:46:30.915Z Vendors: n/a Products: Honor V30 Problem Types: Improper Authentication Description: Honor V30 smartphones with versions earlier than 10.0.1.135(C00E130R4P1) have an improper authentication vulnerability. Certain applications do not properly validate the identity of another application who would call its interface. An attacker could trick the user into installing a malicious application. Successful exploit could allow unauthorized actions leading to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisor
osure. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-02-smartphone-en
CVE ID: CVE-2020-1789 State: PUBLISHED Published: 2020-02-18T02:50:43 Last Updated: 2024-08-04T06:46:30.901Z Vendors: Huawei Products: OSCA-550, OSCA-550A, OSCA-550AX, OSCA-550X Problem Types: Insufficient Authentication Description: Huawei OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X products with version 1.0.1.21(SP3) have an insufficient authentication vulnerability. The software does not require a strong credential when the user trying to do certain operations. Successful exploit could allow an attacker to pass the authentication and do certain operations by a weak credential. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advis
edential. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200121-01-osca-en
CVE ID: CVE-2020-1790 State: PUBLISHED Published: 2020-02-18T02:07:20 Last Updated: 2024-08-04T06:46:30.921Z Vendors: Huawei Products: GaussDB 200 Problem Types: Command Injection Description: GaussDB 200 with version of 6.5.1 have a command injection vulnerability. The software constructs part of a command using external input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-01-gauss-en
CVE ID: CVE-2020-1791 State: PUBLISHED Published: 2020-02-18T02:01:40 Last Updated: 2024-08-04T06:46:30.889Z Vendors: Huawei Products: HUAWEI Mate 20 Problem Types: Improper Authorization Description: HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.185(C00E74R3P8) have an improper authorization vulnerability. The system has a logic judging error under certain scenario, successful exploit could allow the attacker to switch to third desktop after a series of operation in ADB mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200205-01-smartphone-en
CVE ID: CVE-2020-1792 State: PUBLISHED Published: 2020-02-28T18:58:00 Last Updated: 2024-08-04T06:46:30.912Z Vendors: n/a Products: Honor V10 Problem Types: Out of Bounds Write Description: Honor V10 smartphones with versions earlier than BKL-AL20 10.0.0.156(C00E156R2P4) and versions earlier than BKL-L09 10.0.0.146(C432E4R1P4) have an out of bounds write vulnerability. The software writes data past the end of the intended buffer because of insufficient validation of certain parameter when initializing certain driver program. An attacker could trick the user into installing a malicious application, successful exploit could cause the device to reboot. Additional Analyst Notes: - CVE Program Co
a malicious application, successful exploit could cause the device to reboot. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200226-01-smartphone-en
CVE ID: CVE-2020-1793 State: PUBLISHED Published: 2020-03-20T14:56:37 Last Updated: 2024-08-04T06:46:30.905Z Vendors: n/a Products: HUAWEI Mate 20;HUAWEI Mate 30 Pro Problem Types: Improper Authentication Description: There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Mate 20 versions Versions earlier than 10.0.0.188(C00E74R3P8);HUAWEI Mate 30 Pro versions Versions earlier than 10.0.0.203(C00E202R7P2). Additional Analyst Notes: - CVE Program Container:
I Mate 30 Pro versions Versions earlier than 10.0.0.203(C00E202R7P2). Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-02-smartphone-en
CVE ID: CVE-2020-1794 State: PUBLISHED Published: 2020-03-20T15:00:58 Last Updated: 2024-08-04T06:46:31.079Z Vendors: n/a Products: HUAWEI Mate 20;HUAWEI Mate 30 Pro Problem Types: Improper Authentication Description: There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Mate 20 versions Versions earlier than 10.0.0.188(C00E74R3P8);HUAWEI Mate 30 Pro versions Versions earlier than 10.0.0.203(C00E202R7P2). Additional Analyst Notes: - CVE Program Container:
CVE ID: CVE-2020-1795 State: PUBLISHED Published: 2020-03-20T14:47:52 Last Updated: 2024-08-04T06:46:30.911Z Vendors: n/a Products: HUAWEI Mate 20;HUAWEI Mate 30 Pro Problem Types: Logic Error Description: There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation when the Digital Balance function is on. Successful exploit could allow the attacker to bypass the Digital Balance limit after a series of operations.Affected product versions include:HUAWEI Mate 20 versions Versions earlier than 10.0.0.188(C00E74R3P8);HUAWEI Mate 30 Pro versions Versions earlier than 10.0.0.203(C00E202R7P2). Additional Analyst Notes: - CVE Program Contain
AWEI Mate 30 Pro versions Versions earlier than 10.0.0.203(C00E202R7P2). Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-04-smartphone-en
CVE ID: CVE-2020-1796 State: PUBLISHED Published: 2020-03-20T14:54:56 Last Updated: 2024-08-04T06:46:31.067Z Vendors: n/a Products: HUAWEI Mate 20;HUAWEI Mate 30 Pro Problem Types: Improper Authorization Description: There is an improper authorization vulnerability in several smartphones. The software incorrectly performs an authorization to certain user, successful exploit could allow a low privilege user to do certain operation which the user are supposed not to do.Affected product versions include:HUAWEI Mate 20 versions Versions earlier than 10.0.0.188(C00E74R3P8);HUAWEI Mate 30 Pro versions Versions earlier than 10.0.0.203(C00E202R7P2). Additional Analyst Notes: - CVE Program Container:
I Mate 30 Pro versions Versions earlier than 10.0.0.203(C00E202R7P2). Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-05-smartphone-en
CVE ID: CVE-2020-1797 State: PUBLISHED Published: 2020-05-29T19:27:04 Last Updated: 2024-08-04T06:46:30.891Z Vendors: HUAWEI Products: HUAWEI Mate 20 Problem Types: Improper Authorization Description: HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.185(C00E74R3P8) have an improper authorization vulnerability. The system does not properly restrict certain operation in ADB mode, successful exploit could allow certain user break the limit of digital balance function. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-03-smartphone-en
CVE ID: CVE-2020-1798 State: PUBLISHED Published: 2020-05-29T19:01:32 Last Updated: 2024-08-04T06:46:30.922Z Vendors: HUAWEI Products: HUAWEI P30 Problem Types: Improper Authentication Description: HUAWEI P30 smartphones with versions earlier than 10.1.0.135(C00E135R2P11) have an improper authentication vulnerability. A logic error occurs when handling NFC work, an attacker should establish a NFC connection to the target phone, and then do a series of operations on the target phone. Successful exploit could allow a guest user do certain operation which is beyond the guest user's privilege. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/securi
ser's privilege. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-02-smartphone-en
CVE ID: CVE-2020-1799 State: PUBLISHED Published: 2020-05-21T14:11:50 Last Updated: 2024-08-04T06:46:30.895Z Vendors: n/a Products: E6878-370 Problem Types: Use After Free Description: E6878-370 with versions of 10.0.3.1(H557SP27C233), 10.0.3.1(H563SP1C00), 10.0.3.1(H563SP1C233) has a use after free vulnerability. The software references memory after it has been freed in certain scenario, the attacker does a series of crafted operations through web portal, successful exploit could cause a use after free condition which may lead to malicious code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-0
t Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-uaf-en
CVE ID: CVE-2020-1800 State: PUBLISHED Published: 2020-03-26T14:27:42 Last Updated: 2024-08-04T06:46:30.887Z Vendors: n/a Products: HUAWEI P30 Problem Types: Improper Access Control Description: HUAWEI smartphones P30 with versions earlier than 10.0.0.185(C00E85R1P11) have an improper access control vulnerability. The software incorrectly restricts access to a function interface from an unauthorized actor, the attacker tricks the user into installing a crafted application, successful exploit could allow the attacker do certain unauthenticated operations. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200325-02-
Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200325-02-smartphone-en
CVE ID: CVE-2020-1801 State: PUBLISHED Published: 2020-04-10T14:04:19 Last Updated: 2024-08-04T06:46:31.079Z Vendors: n/a Products: Mate 30 Pro;Mate 30 Problem Types: Improper Authentication Description: There is an improper authentication vulnerability in several smartphones. Certain function interface in the system does not sufficiently validate the caller's identity in certain share scenario, successful exploit could cause information disclosure. Affected product versions include:Mate 30 Pro versions Versions earlier than 10.0.0.205(C00E202R7P2);Mate 30 versions Versions earlier than 10.0.0.205(C00E201R7P2). Additional Analyst Notes: - CVE Program Container: References: - https://www.huaw
earlier than 10.0.0.205(C00E201R7P2). Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200408-01-smartphone-en
CVE ID: CVE-2020-1802 State: PUBLISHED Published: 2020-04-10T13:59:56 Last Updated: 2024-08-04T06:46:30.898Z Vendors: n/a Products: OSCA-550;OSCA-550A;OSCA-550AX;OSCA-550X Problem Types: Insufficient Integrity Validation Description: There is an insufficient integrity validation vulnerability in several products. The device does not sufficiently validate the integrity of certain file in certain loading processes, successful exploit could allow the attacker to load a crafted file to the device through USB.Affected product versions include:OSCA-550 versions 1.0.1.23(SP2);OSCA-550A versions 1.0.1.23(SP2);OSCA-550AX versions 1.0.1.23(SP2);OSCA-550X versions 1.0.1.23(SP2). Additional Analyst Note