5.9med
CVE-2017-8157
OceanStor 5800 V3 with software V300R002C00 and V300R002C10, OceanStor 6900 V3 V300R001C00 has an information leakage vulnerability.
Published 8 y ago · modified 4 mo ago · JSON
CVSS
5.9
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.6%
percentile 47%
Public exploits
0
none known
Summary
OceanStor 5800 V3 with software V300R002C00 and V300R002C10, OceanStor 6900 V3 V300R001C00 has an information leakage vulnerability. Products use TLS1.0 to encrypt. Attackers can exploit TLS1.0's vulnerabilities to decrypt data to obtain sensitive information.
Exploit prediction (EPSS)
0.57% probability of exploitation in the next 30 days, higher than 47% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 5.9 | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
| NVD | 2.0 | 4.3 | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Affected products
- Huawei Technologies Co., Ltd. OceanStor 5800 V3, OceanStor 6900 V3
Classification
- Weakness
- CWE-327 Use of a Broken or Risky Cryptographic Algorithm
References
- huawei.com /en/psirt/security-advisories/huawei-sa-20170920-01-oceanstor-en · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2017-8157
- NVD: CVE-2017-8157
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.