Huawei OceanStor 2800 V3, V300R003C00, V300R003C20, OceanStor 5300 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5500 V3, V300R003C0…

Published 8 y ago 2018-02-15 · modified 4 mo ago 2026-06-17 · JSON

CVSS

3.1

v3.0 · NVD

CISA KEV

not known exploited

EPSS

0.3%

percentile 17%

Public exploits

none known

Huawei OceanStor 2800 V3, V300R003C00, V300R003C20, OceanStor 5300 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5500 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5600 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5800 V3, V300R003C00, V300R003C10, V300R003C20 have an improper access control vulnerability. Due to incorrectly restrict access to a resource, an attacker with high privilege may exploit the vulnerability to query some information or send specific message to cause some service abnormal.

Exploit prediction (EPSS)

0.25% probability of exploitation in the next 30 days, higher than 17% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.0	3.1	`CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L`
NVD	2.0	2.9	`AV:A/AC:H/Au:S/C:P/I:N/A:P`

Affected products

Huawei Technologies Co., Ltd. OceanStor 2800 V3,OceanStor 5300 V3,OceanStor 5500 V3,OceanStor 5600 V3,OceanStor 5800 V3

Classification

Weakness

CWE-732 Incorrect Permission Assignment for Critical Resource

References

huawei.com /en/psirt/security-advisories/huawei-sa-20171122-01-oceanstor-en · x_refsource_CONFIRM, x_transferred

Sources

CVE List: CVE-2017-15352
NVD: CVE-2017-15352

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.