CVE-2017-8157

Published: Nov 22, 2017Modified: May 13, 2026

5.9

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

OceanStor 5800 V3 with software V300R002C00 and V300R002C10, OceanStor 6900 V3 V300R001C00 has an information leakage vulnerability. Products use TLS1.0 to encrypt. Attackers can exploit TLS1.0's vulnerabilities to decrypt data to obtain sensitive information.

Affected (3)

Products: Huawei: Oceanstor 5800 V3 Firmware, Oceanstor 6900 V3 Firmware

2 products

Oceanstor 5800 V3 Firmware

Oceanstor 6900 V3 Firmware

Configuration A

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Oceanstor 5800 V3 Firmware	Version v300r002c00
Huawei Oceanstor 5800 V3 Firmware	Version v300r002c10

Running on/with	Platform Versions
Huawei Oceanstor 5800 V3	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Oceanstor 6900 V3 Firmware	Version v300r001c00

Running on/with	Platform Versions
Huawei Oceanstor 6900 V3	All versions

Related CWEs

Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

References (2)

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-oceanstor-en

Source: psirt@huawei.com

Vendor Advisory

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-oceanstor-en

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.