What is CVE-2015-2254?

CVE-2015-2254 is a critical-severity vulnerability in Huawei Oceanstor Uds, classified under Information Disclosure. CVSS score: 9.1/10. Published 2019-03-13.

How severe is CVE-2015-2254?

Critical severity. CVSS v3 base score is 9.1 out of 10.

Information disclosure in Huawei Oceanstor Uds

CVE-2015-2254

Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to capture and change patch loading information resulting in the deletion of directory files and compromise of system functions when loading a patch.

Vulnerability class: Information Disclosure

EPSS: 0.009 (55.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H.

Affected products

Huawei Oceanstor_uds
Huawei Oceanstor_uds_firmware
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2015-2254?: CVE-2015-2254 is a critical-severity vulnerability in Huawei Oceanstor Uds, classified under Information Disclosure. CVSS score: 9.1/10. Published 2019-03-13.
How severe is CVE-2015-2254?: Critical severity. CVSS v3 base score is 9.1 out of 10.