VULNERABILITY INTELLIGENCE

CVE-2017-15352

CVSS score3.1 LOW
EPSS probability0.25%
CISA KEVNot currently listed
Published2018-02-15
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L

Description

Huawei OceanStor 2800 V3, V300R003C00, V300R003C20, OceanStor 5300 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5500 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5600 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5800 V3, V300R003C00, V300R003C10, V300R003C20 have an improper access control vulnerability. Due to incorrectly restrict access to a resource, an attacker with high privilege may exploit the vulnerability to query some information or send specific message to cause some service abnormal.

Weakness classification

  • CWE-732: Incorrect Permission Assignment for Critical Resource

Primary references