What is CVE-2017-8157?

CVE-2017-8157 is a medium-severity vulnerability in Huawei Oceanstor 5800 V3, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 5.9/10. Published 2017-11-22.

How severe is CVE-2017-8157?

Medium severity. CVSS v3 base score is 5.9 out of 10.

Vulnerability in Huawei Oceanstor 5800 V3

CVE-2017-8157

OceanStor 5800 V3 with software V300R002C00 and V300R002C10, OceanStor 6900 V3 V300R001C00 has an information leakage vulnerability. Products use TLS1.0 to encrypt. Attackers can exploit TLS1.0's vulnerabilities to decrypt data to obtain sensitive information.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.006 (43.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Huawei Oceanstor_5800_v3
Huawei Oceanstor_5800_v3_firmware — versions v300r002c00, v300r002c10
Huawei Oceanstor_6900_v3
Huawei Oceanstor_6900_v3_firmware — versions v300r001c00
Huawei Technologies Co., Ltd. Oceanstor 5800 V3, 6900 V3 — versions OceanStor 5800 V3 with software V300R002C00 and V300R002C10, OceanStor 6900 V3 V300R001C00

Weakness classification (CWE)

CWE-327 — Use of a Broken or Risky Cryptographic Algorithm

References

psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-8157?: CVE-2017-8157 is a medium-severity vulnerability in Huawei Oceanstor 5800 V3, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 5.9/10. Published 2017-11-22.
How severe is CVE-2017-8157?: Medium severity. CVSS v3 base score is 5.9 out of 10.