3.1

CVE-2017-15352

Huawei OceanStor 2800 V3, V300R003C00, V300R003C20, OceanStor 5300 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5500 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5600 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5800 V3, V300R003C00, V300R003C10, V300R003C20 have an improper access control vulnerability. Due to incorrectly restrict access to a resource, an attacker with high privilege may exploit the vulnerability to query some information or send specific message to cause some service abnormal.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Oceanstor 2800 Firmware Version v300r003c00
   Huawei ≫ Oceanstor 2800 Version -
Huawei ≫ Oceanstor 2800 Firmware Version v300r003c20
   Huawei ≫ Oceanstor 2800 Version -
Huawei ≫ Oceanstor 5300 Firmware Version v300r003c00
   Huawei ≫ Oceanstor 5300 Version -
Huawei ≫ Oceanstor 5300 Firmware Version v300r003c10
   Huawei ≫ Oceanstor 5300 Version -
Huawei ≫ Oceanstor 5300 Firmware Version v300r003c20
   Huawei ≫ Oceanstor 5300 Version -
Huawei ≫ Oceanstor 5500 Firmware Version v300r003c00
   Huawei ≫ Oceanstor 5500 Version -
Huawei ≫ Oceanstor 5500 Firmware Version v300r003c10
   Huawei ≫ Oceanstor 5500 Version -
Huawei ≫ Oceanstor 5500 Firmware Version v300r003c20
   Huawei ≫ Oceanstor 5500 Version -
Huawei ≫ Oceanstor 5600 Firmware Version v300r003c00
   Huawei ≫ Oceanstor 5600 Version -
Huawei ≫ Oceanstor 5600 Firmware Version v300r003c10
   Huawei ≫ Oceanstor 5600 Version -
Huawei ≫ Oceanstor 5600 Firmware Version v300r003c20
   Huawei ≫ Oceanstor 5600 Version -
Huawei ≫ Oceanstor 5800 Firmware Version v300r003c00
   Huawei ≫ Oceanstor 5800 Version -
Huawei ≫ Oceanstor 5800 Firmware Version v300r003c10
   Huawei ≫ Oceanstor 5800 Version -
Huawei ≫ Oceanstor 5800 Firmware Version v300r003c20
   Huawei ≫ Oceanstor 5800 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.168
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 3.1 0.5 2.5
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L
NIST 2.9 2.5 4.9
AV:A/AC:H/Au:S/C:P/I:N/A:P
CWE-732 Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171122-01-oceanstor-en
Vendor Advisory