1. Home
  2. CVE Database
  3. CVE-2017-15352
LOW · 3.1

CVE-2017-15352

Huawei OceanStor 2800 V3, V300R003C00, V300R003C20, OceanStor 5300 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5500 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5600 V3, V300R003C00, ...

Vulnerability Description

Huawei OceanStor 2800 V3, V300R003C00, V300R003C20, OceanStor 5300 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5500 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5600 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5800 V3, V300R003C00, V300R003C10, V300R003C20 have an improper access control vulnerability. Due to incorrectly restrict access to a resource, an attacker with high privilege may exploit the vulnerability to query some information or send specific message to cause some service abnormal.

CVSS Score

3.1

LOW

CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L
Attack Vector
ADJACENT_NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
LOW

Affected Products

VendorProductVersions
HuaweiOceanstor 2800 Firmwarev300r003c00
HuaweiOceanstor 2800-
HuaweiOceanstor 5300 Firmwarev300r003c00
HuaweiOceanstor 5300-
HuaweiOceanstor 5500 Firmwarev300r003c00
HuaweiOceanstor 5500-
HuaweiOceanstor 5600 Firmwarev300r003c00
HuaweiOceanstor 5600-
HuaweiOceanstor 5800 Firmwarev300r003c00
HuaweiOceanstor 5800-

Related Weaknesses (CWE)

CWE-732

References

FAQ

What is CVE-2017-15352?

CVE-2017-15352 is a vulnerability with a CVSS score of 3.1 (LOW). Huawei OceanStor 2800 V3, V300R003C00, V300R003C20, OceanStor 5300 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5500 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5600 V3, V300R003C00, ...

How severe is CVE-2017-15352?

CVE-2017-15352 has been rated LOW with a CVSS base score of 3.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-15352?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei Oceanstor 2800 Firmware, Huawei Oceanstor 2800, Huawei Oceanstor 5300 Firmware, Huawei Oceanstor 5300, Huawei Oceanstor 5500 Firmware.