CVE-2015-2254

EPSS 0.28%
Published 13.03.2019 16:29:00
Last modified 21.11.2024 02:27:06
Source cve@mitre.org
Teams watchlist Login
Open Login

Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to capture and change patch loading information resulting in the deletion of directory files and compromise of system functions when loading a patch.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Huawei ≫ Oceanstor Uds Firmware Version < 100r002c01spc102

Huawei ≫ Oceanstor Uds Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.28%	0.481

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.1	3.9	5.2	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
nvd@nist.gov	6.4	10	4.9	AV:N/AC:L/Au:N/C:N/I:P/A:P

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://www.huawei.com/en/psirt/security-advisories/hw-417839

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2015-2254

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-2254

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-2254

EUVD