PT-2017-9818 · Huawei · Huawei Fusionstorage

Publicado 2017-04-02 · Atualizado 2017-04-05 · CVE-2016-8803

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Huawei FusionStorage version V100R003C30U1

Description The issue concerns the maintenance module in Huawei FusionStorage, which allows attackers to create documents according to special rules. This can lead to obtaining the OS root privilege of FusionStorage.

Recommendations For Huawei FusionStorage version V100R003C30U1, update to a version that includes a fix for this issue, as the current version allows attackers to gain OS root privilege through the maintenance module.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2016-8803

Produtos afetados

Huawei Fusionstorage

Referências · 4

• http://huawei.com/en/psirt/security-advisories/huawei-sa-20161123-01-fusionstorage-en · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-8803 · Aviso do Fabricante
• http://securityfocus.com/bid/94507 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-8803 · Nota de Segurança