Design/Logic Flaw

2017-06-0816:29:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.6%

JSON

The DeviceManager in Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to obtain sensitive information via a crafted UDS patch with JavaScript.

CPENameOperatorVersion
oceanstor_uds_firmwareeq<= v100r2c1spc101

CPE	Name	Operator	Version
	oceanstor_uds_firmware	eq	<= v100r2c1spc101

References

www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-417837.htm