CVE-2020-1789

Huawei OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X products with version 1.0.1.21(SP3) have an insufficient authentication vulnerability. The software does not require a strong credential when the user trying to do certain operations. Successful exploit could allow an attacker to pass the authentication and do certain operations by a weak credential.

• CWE-287

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200121-01-osca-enVendor Advisory
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200121-01-osca-enVendor Advisory

Published

Feb 18, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-1778When OTRS uses multiple backends for user authentication (wi…4.3
• CVE-2020-1779When dynamic templates are used (OTRSTicketForms), admin can…4.9
• CVE-2020-1785Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a den…5.5
• CVE-2020-1786HUAWEI Mate 20 Pro smartphones versions earlier than 10.0.0.…4.6
• CVE-2020-1787HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139(C…6.6
• CVE-2020-1788Honor V30 smartphones with versions earlier than 10.0.1.135(…5.5
• CVE-2020-17891TP-Link Archer C1200 firmware version 1.13 Build 2018/01/24 …6.1
• CVE-2020-1790GaussDB 200 with version of 6.5.1 have a command injection v…8.8
• CVE-2020-17901Cross-site request forgery (CSRF) in PbootCMS 1.3.2 allows a…6.5
• CVE-2020-1791HUAWEI Mate 20 smartphones with versions earlier than 10.0.0…2.4
• CVE-2020-1792Honor V10 smartphones with versions earlier than BKL-AL20 10…5.5
• CVE-2020-1793There is an improper authentication vulnerability in several…4.6