PT-2017-16009 · Sun · Sun Zfs Storage Appliance Kit

Published 2017-04-24 · Updated 2019-10-03 · CVE-2017-3578

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sun ZFS Storage Appliance Kit (AK) version 2013

Description The issue affects the RAS subsystems component of the Sun ZFS Storage Appliance Kit (AK), allowing a low-privileged attacker with logon access to the infrastructure to compromise the Sun ZFS Storage Appliance Kit (AK). Successful attacks can result in the takeover of the Sun ZFS Storage Appliance Kit (AK) and may significantly impact additional products.

Recommendations For Sun ZFS Storage Appliance Kit (AK) version 2013, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2017-3578

Affected Products

Sun Zfs Storage Appliance Kit

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-3578 · Security Note
• https://osv.dev/vulnerability/CVE-2017-3578 · Vendor Advisory
• http://oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html · Vendor Advisory
• http://securitytracker.com/id/1038292 · Note
• http://securityfocus.com/bid/97810 · Note