PT-2017-9818 · Huawei · Huawei Fusionstorage

Published 2017-04-02 · Updated 2017-04-05 · CVE-2016-8803

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Huawei FusionStorage version V100R003C30U1

Description The issue concerns the maintenance module in Huawei FusionStorage, which allows attackers to create documents according to special rules. This can lead to obtaining the OS root privilege of FusionStorage.

Recommendations For Huawei FusionStorage version V100R003C30U1, update to a version that includes a fix for this issue, as the current version allows attackers to gain OS root privilege through the maintenance module.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2016-8803

Affected Products

Huawei Fusionstorage

References · 4

• http://huawei.com/en/psirt/security-advisories/huawei-sa-20161123-01-fusionstorage-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-8803 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-8803 · Security Note
• http://securityfocus.com/bid/94507 · Note