PT-2017-18165 · Huawei · Oceanstor 6900 V3+1

Publicado 2017-11-22 · Atualizado 2019-10-03 · CVE-2017-8157

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OceanStor 5800 V3 versions V300R002C00 through V300R002C10 OceanStor 6900 V3 version V300R001C00

Description The issue is related to an information leakage vulnerability. The products use TLS1.0 for encryption, which has known vulnerabilities. Attackers can exploit these vulnerabilities to decrypt data and obtain sensitive information.

Recommendations For OceanStor 5800 V3 versions V300R002C00 through V300R002C10, consider upgrading to a version that uses a more secure encryption protocol. For OceanStor 6900 V3 version V300R001C00, consider upgrading to a version that uses a more secure encryption protocol. As a temporary workaround, consider disabling the use of TLS1.0 to minimize the risk of exploitation.

Correção

Use of a Broken Cryptographic Algorithm

Enumeração de Fraquezas

CWE-327

Identificadores relacionados

CVE-2017-8157

Produtos afetados

Oceanstor 5800 V3

Oceanstor 6900 V3

Referências · 3

• https://osv.dev/vulnerability/CVE-2017-8157 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-8157 · Nota de Segurança
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-oceanstor-en · Aviso do Fabricante