CVE-2017-15352 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2017-15352

Analyzed

More Info Official Page

Source-psirt@huawei.com

Published At-15 Feb, 2018 | 16:29

Updated At-03 Oct, 2019 | 00:03

Huawei OceanStor 2800 V3, V300R003C00, V300R003C20, OceanStor 5300 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5500 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5600 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5800 V3, V300R003C00, V300R003C10, V300R003C20 have an improper access control vulnerability. Due to incorrectly restrict access to a resource, an attacker with high privilege may exploit the vulnerability to query some information or send specific message to cause some service abnormal.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	3.1	LOW	CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L
Primary	2.0	2.9	LOW	AV:A/AC:H/Au:S/C:P/I:N/A:P

CPE Matches

Huawei Technologies Co., Ltd.

>>oceanstor_2800_firmware>>v300r003c00

cpe:2.3:o:huawei:oceanstor_2800_firmware:v300r003c00:*:*:*:*:*:*:*

Huawei Technologies Co., Ltd.

>>oceanstor_2800_firmware>>v300r003c20

cpe:2.3:o:huawei:oceanstor_2800_firmware:v300r003c20:*:*:*:*:*:*:*

Huawei Technologies Co., Ltd.

>>oceanstor_2800>>-

cpe:2.3:h:huawei:oceanstor_2800:-:*:*:*:*:*:*:*

Huawei Technologies Co., Ltd.

>>oceanstor_5300_firmware>>v300r003c00

cpe:2.3:o:huawei:oceanstor_5300_firmware:v300r003c00:*:*:*:*:*:*:*

Huawei Technologies Co., Ltd.

>>oceanstor_5300_firmware>>v300r003c10

cpe:2.3:o:huawei:oceanstor_5300_firmware:v300r003c10:*:*:*:*:*:*:*

Huawei Technologies Co., Ltd.

>>oceanstor_5300_firmware>>v300r003c20

cpe:2.3:o:huawei:oceanstor_5300_firmware:v300r003c20:*:*:*:*:*:*:*

Huawei Technologies Co., Ltd.

>>oceanstor_5300>>-

cpe:2.3:h:huawei:oceanstor_5300:-:*:*:*:*:*:*:*

Huawei Technologies Co., Ltd.

>>oceanstor_5500_firmware>>v300r003c00

cpe:2.3:o:huawei:oceanstor_5500_firmware:v300r003c00:*:*:*:*:*:*:*

Huawei Technologies Co., Ltd.

>>oceanstor_5500_firmware>>v300r003c10

cpe:2.3:o:huawei:oceanstor_5500_firmware:v300r003c10:*:*:*:*:*:*:*

Huawei Technologies Co., Ltd.

>>oceanstor_5500_firmware>>v300r003c20

cpe:2.3:o:huawei:oceanstor_5500_firmware:v300r003c20:*:*:*:*:*:*:*

Huawei Technologies Co., Ltd.

>>oceanstor_5500>>-

cpe:2.3:h:huawei:oceanstor_5500:-:*:*:*:*:*:*:*

Huawei Technologies Co., Ltd.

>>oceanstor_5600_firmware>>v300r003c00

cpe:2.3:o:huawei:oceanstor_5600_firmware:v300r003c00:*:*:*:*:*:*:*

Huawei Technologies Co., Ltd.

>>oceanstor_5600_firmware>>v300r003c10

cpe:2.3:o:huawei:oceanstor_5600_firmware:v300r003c10:*:*:*:*:*:*:*

Huawei Technologies Co., Ltd.

>>oceanstor_5600_firmware>>v300r003c20

cpe:2.3:o:huawei:oceanstor_5600_firmware:v300r003c20:*:*:*:*:*:*:*

Huawei Technologies Co., Ltd.

>>oceanstor_5600>>-

cpe:2.3:h:huawei:oceanstor_5600:-:*:*:*:*:*:*:*

Huawei Technologies Co., Ltd.

>>oceanstor_5800_firmware>>v300r003c00

cpe:2.3:o:huawei:oceanstor_5800_firmware:v300r003c00:*:*:*:*:*:*:*

Huawei Technologies Co., Ltd.

>>oceanstor_5800_firmware>>v300r003c10

cpe:2.3:o:huawei:oceanstor_5800_firmware:v300r003c10:*:*:*:*:*:*:*

Huawei Technologies Co., Ltd.

>>oceanstor_5800_firmware>>v300r003c20

cpe:2.3:o:huawei:oceanstor_5800_firmware:v300r003c20:*:*:*:*:*:*:*

Huawei Technologies Co., Ltd.

>>oceanstor_5800>>-

cpe:2.3:h:huawei:oceanstor_5800:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-732	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171122-01-oceanstor-en	psirt@huawei.com	Vendor Advisory