What’s Vulnerable › Vulnerabilities

CVE-2017-15352

• Severity: low (CVSS 3.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-02-15 · updated 2026-06-17
• Weakness: CWE-732

Description

Huawei OceanStor 2800 V3, V300R003C00, V300R003C20, OceanStor 5300 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5500 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5600 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5800 V3, V300R003C00, V300R003C10, V300R003C20 have an improper access control vulnerability. Due to incorrectly restrict access to a resource, an attacker with high privilege may exploit the vulnerability to query some information or send specific message to cause some service abnormal.

Affected products

• Huawei Oceanstor 2800 Firmware: v300r003c00, v300r003c20
• Huawei Oceanstor 5300 Firmware: v300r003c00, v300r003c10, v300r003c20
• Huawei Oceanstor 5500 Firmware: v300r003c00, v300r003c10, v300r003c20
• Huawei Oceanstor 5600 Firmware: v300r003c00, v300r003c10, v300r003c20
• Huawei Oceanstor 5800 Firmware: v300r003c00, v300r003c10, v300r003c20

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171122-01-oceanstor-en
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171122-01-oceanstor-en

Get alerted when CVE-2017-15352 or the next vulnerability affects your stack