CVE-2017-15352
Description
Huawei OceanStor 2800 V3, V300R003C00, V300R003C20, OceanStor 5300 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5500 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5600 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5800 V3, V300R003C00, V300R003C10, V300R003C20 have an improper access control vulnerability. Due to incorrectly restrict access to a resource, an attacker with high privilege may exploit the vulnerability to query some information or send specific message to cause some service abnormal.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei oceanstor_2800_firmware | v300r003c00, v300r003c20 | — |
| huawei oceanstor_5300_firmware | v300r003c00, v300r003c10, v300r003c20 | — |
| huawei oceanstor_5500_firmware | v300r003c00, v300r003c10, v300r003c20 | — |
| huawei oceanstor_5600_firmware | v300r003c00, v300r003c10, v300r003c20 | — |
| huawei oceanstor_5800_firmware | v300r003c00, v300r003c10, v300r003c20 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.