Vulnerability in Huawei Oceanstor 2800
CVE-2017-15352
Huawei OceanStor 2800 V3, V300R003C00, V300R003C20, OceanStor 5300 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5500 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5600 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5800 V3, V300R003C00, V300R003C10, V300R003C20 have an improper access control vulnerability. Due to incorrectly restrict access to a resource, an attacker with high privilege may exploit the vulnerability to query some information or send specific message to cause some service abnormal.
EPSS: 0.003 (16.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.1 (Low). Vector: CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L.
Affected products
- Huawei Oceanstor_2800
- Huawei Oceanstor_2800_firmware — versions v300r003c00, v300r003c20
- Huawei Oceanstor_5300
- Huawei Oceanstor_5300_firmware — versions v300r003c00, v300r003c10, v300r003c20
- Huawei Oceanstor_5500
- Huawei Oceanstor_5500_firmware — versions v300r003c00, v300r003c10, v300r003c20
- Huawei Oceanstor_5600
- Huawei Oceanstor_5600_firmware — versions v300r003c00, v300r003c10, v300r003c20
- Huawei Oceanstor_5800
- Huawei Oceanstor_5800_firmware — versions v300r003c00, v300r003c10, v300r003c20
Weakness classification (CWE)
References
- psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2017-15352?
- CVE-2017-15352 is a low-severity vulnerability in Huawei Oceanstor 2800, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 3.1/10. Published 2018-02-15.
- How severe is CVE-2017-15352?
- Low severity. CVSS v3 base score is 3.1 out of 10.