CVE-2017-15352
3.1
Vector
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L
Exploitability: 0.5 / Impact: 2.5
Source: NVD
Description
Huawei OceanStor 2800 V3, V300R003C00, V300R003C20, OceanStor 5300 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5500 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5600 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5800 V3, V300R003C00, V300R003C10, V300R003C20 have an improper access control vulnerability. Due to incorrectly restrict access to a resource, an attacker with high privilege may exploit the vulnerability to query some information or send specific message to cause some service abnormal.
Affected (14)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version v300r003c00 |
| Running on/with | Platform Versions |
|---|---|
Huawei Oceanstor 2800 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version v300r003c00 |
| Running on/with | Platform Versions |
|---|---|
Huawei Oceanstor 5300 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version v300r003c00 |
| Running on/with | Platform Versions |
|---|---|
Huawei Oceanstor 5500 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version v300r003c00 |
| Running on/with | Platform Versions |
|---|---|
Huawei Oceanstor 5600 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Version v300r003c00 |
| Running on/with | Platform Versions |
|---|---|
Huawei Oceanstor 5800 | All versions |
References (2)
Source: psirt@huawei.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.