PT-2018-5800 · Huawei · Huawei Oceanstor 5300 V3+4

Publicado 2018-02-15 · Atualizado 2019-10-03 · CVE-2017-15352

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Baixa

Vetor base

AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions: Huawei OceanStor 2800 V3 versions V300R003C00 through V300R003C20 Huawei OceanStor 5300 V3 versions V300R003C00 through V300R003C20 Huawei OceanStor 5500 V3 versions V300R003C00 through V300R003C20 Huawei OceanStor 5600 V3 versions V300R003C00 through V300R003C20 Huawei OceanStor 5800 V3 versions V300R003C00 through V300R003C20

Description: The issue is related to improper access control, where access to a resource is not correctly restricted. This could allow an attacker with high privilege to exploit the vulnerability, potentially querying some information or sending specific messages that could cause service abnormalities.

Recommendations: For Huawei OceanStor 2800 V3 versions V300R003C00 through V300R003C20, update to a version that properly restricts access to the vulnerable resource. For Huawei OceanStor 5300 V3 versions V300R003C00 through V300R003C20, update to a version that properly restricts access to the vulnerable resource. For Huawei OceanStor 5500 V3 versions V300R003C00 through V300R003C20, update to a version that properly restricts access to the vulnerable resource. For Huawei OceanStor 5600 V3 versions V300R003C00 through V300R003C20, update to a version that properly restricts access to the vulnerable resource. For Huawei OceanStor 5800 V3 versions V300R003C00 through V300R003C20, update to a version that properly restricts access to the vulnerable resource. As a temporary workaround, consider restricting access to the vulnerable resource until a patch is available.

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2017-15352

Produtos afetados

Huawei Oceanstor 2800 V3

Huawei Oceanstor 5300 V3

Huawei Oceanstor 5500 V3

Huawei Oceanstor 5600 V3

Huawei Oceanstor 5800 V3

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-15352 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-15352 · Aviso do Fabricante
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20171122-01-oceanstor-en · Aviso do Fabricante