What’s Vulnerable › Vulnerabilities

CVE-2017-8157

• Severity: medium (CVSS 5.9 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-11-22 · updated 2026-06-17
• Weakness: CWE-327

Description

OceanStor 5800 V3 with software V300R002C00 and V300R002C10, OceanStor 6900 V3 V300R001C00 has an information leakage vulnerability. Products use TLS1.0 to encrypt. Attackers can exploit TLS1.0's vulnerabilities to decrypt data to obtain sensitive information.

Affected products

• OceanStor 5800 V3 V300R003C00: v300r002c00, v300r002c10
• Huawei Oceanstor 6900 V3 Firmware: v300r001c00

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-oceanstor-en
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-oceanstor-en

Get alerted when CVE-2017-8157 or the next vulnerability affects your stack